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Powerful. 

Intelligent. 


The  difference  between 
networking  and  not  working. 

Some  systems  require  you  to  reconfigure  your  network  infrastructure 
to  match  their  standards.  Not  the  IBM  BladeCenter®  with  Intel®  Xeon® 
processors.  It  offers  a  broad  range  of  networking  technologies— including 
some  of  the  most  advanced  virtualization  solutions  in  the  industry.  So 
you  can  choose  the  one  that  works  best  with  your  infrastructure.  And 
IBM  BladeCenter  can  save  you  up  to  40%  on  networking  costs  versus 
competitive  offerings.1 


Take  10  minutes  to  see  for  yourself. 

Learn  how  you  could  achieve  a  3-month  ROI  on  your  migration 
with  our  Systems  Consolidation  Tool.  Visit  ibm.com/systems/blade 


I.The  40%  cost  savings  are  based  on  a  comparison  of  the  acquisition  costs  of  10  current  generation  HP  rack  optimized  solutions  (Le,  DL380  67  Proliant  with 
10  GbE  Ethernet  and  Fibre  Channel  infrastructure)  to  10  current  generation  IBM  BladeCenter  and  HS22  systems  with  converged  fabric  solutions  from  Brocade. 
See  www-03.ibm.com/systerns/bladecenter/hardware/openfabrlc/fcoe.html.  The  IBM  solution  Includes  chassis  Infrastructure.  Pricing  utilizes  publicly 
available  pricing  per  port  for  TbR  ethemet  and  FC  switching  Infrastructure  as  of  Jan  2011.  The  40%  networking  hardware  costs  savings  result  from  eliminating 
separate  Ethemet  and  Fibre  Channel  cards  and  switches  in  the  deployment  of  an  IBM  BladeCenter  FCoE  solution  for  10  servers  and  associated  networking 
hardware  in  comparison  to  the  HP  solution  IBM,  the  IBM  logo,  ibm.com  and  BladeCenter  are  trademarks  of  International  Business  Machines  Corp,  registered 
in  many  jurisdictions  worldwide  Other  product  and  service  names  might  be  trademarks  of  IBM  or  other  companies  A  current  list  of  IBM  trademarks  is  available 
on  the  Web  at  wwwjbmcom/legat/copytradeshtml.  Intel,  the  Intel  logo  Xeon  and  Xeon  Inside  are  trademarks  of  Intel  Corporation  in  the  US.  and  other  countries 
©  International  Business  Machines  Corporation  2011.  All  rights  reserved. 
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THE  DATA  CENTER  TS  HERE 
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When  you  create  a  cloud-optimized  network, 
your  whole  business  can  do  more.  You  can  push 

high-bandwidth  applications  to  the  very  edges  of 

*  ■ "...  <, .  • 

the  network  in  seconds.  You  can  reduce  complexity 
and  management  issues.  Imagine  a  network  that 
works  the  way  you  always  thought  it  should. 

The  answer  is  Brocade. 

Brocade  can  help  you  create  a  cloud-optimized 
network  that’s  flatter,  simpler,  and  more  automated 
than  ever  before.  90%  of  the  Global  1000  already 
rely  on  Brocade,  as  do  two-thirds  of  the  world’s 
Internet  exchanges. 


Find  out  what  Brocade  customers  already  know 
isit  brocade.com/everywhere 
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Kurt  Roemer 

CHIEF  SECURITY  STRATEGIST 
FOR  CITRIX  SYSTEMS 

Kurt  Roemer  is  the  chief  se¬ 
curity  strategist  for  Citrix  Sys¬ 
tems,  leading  security,  compli¬ 
ance,  risk  and  privacy  strategy 
efforts  for  Citrix  products.  As 
a  member  of  the  Citrix  CTO 
Office,  he  sets  the  technical 
direction  for  cybersecurity 
innovation.  Roemer  is  a  Certi¬ 
fied  Information  Systems 
Security  Professional  (CISSP) 
and  a  commissioner  for  the 
U.S.  public-sector  Cloud2  initia¬ 
tive  and  led  efforts  to  develop 
the  Payment  Card  Industry 
Virtualization  Guidance  Infor¬ 
mation  Supplement. 


FOR  MORE  INFORMATION: 

please  visit  us  at 

cltrix.com/simplicityispower 


BLOG:  http://twitter.com/citrixblogs 


TWITTER:  citrix.com/twitter 
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Data  Security  via 
Desktop  Virtualization 

By  centralizing  virtual  desktops  and  data,  companies  can  protect 
sensitive  information  while  giving  users  more  flexibility  and  choice. 


What  are  the  main  security  "pressure 
points"  corporate  and  government 
organizations  face  today? 

The  top  three  are  the  consumerization  of  IT, 
cloud  computing  and  a  wildly  evolved  threat 
landscape.  Consumers  today  are  bringing  their 
own  devices  into  the  workforce,  selecting  their 
own  applications  and  making  other  decisions 
that  IT  departments  used  to  make.  Consumer¬ 
ization  changes  fundamental  security  assump¬ 
tions  and  really  shakes  the  foundation  that 
IT  security  has  been  built  upon.  As  for  cloud 
computing,  the  fearmongers  who  state  that 
the  cloud  is  the  end  of  security  are  wrong.  The 
cloud  can  give  us  a  needed  restart  to  do  secu¬ 
rity  right— taking  into  account  how  people  are 
using  today’s  computing  technologies  while 
protecting  sensitive  data  and  privacy.  Finally, 
on  the  threat  landscape,  we’re  seeing  that  cur¬ 
rent  attempts  at  data  exfiltration  are  highly  suc¬ 
cessful.  The  old  security  model  that  protects 
primarily  against  malicious  access  attempts  is 
woefully  inadequate  to  mitigate  vulnerabilities 
once  access  has  been  granted. 

What  is  desktop  virtualization,  and  how 
can  it  increase  IT  security? 

With  desktop  virtualization,  you  can  take  a 
familiar  desktop  PC  or  laptop  environment, 
virtualize  all  its  applications  and  the  desktop 
interface  itself  and  run  everything  on  server- 
based  virtual  machines  in  the  data  center  or  in 
the  cloud.  Users  can  then  access  their  virtual¬ 
ized  desktops  with  various  client  devices, 
including  PCs,  tablets  and  smartphones.  Every 
user  can  be  strongly  authenticated  into  the 
virtualized  desktop  environment.  All  data  that 
goes  back  and  forth  between  the  client  devices 
and  any  virtualized  desktops  or  applications  is 
natively  encrypted.  Along  with  that,  every¬ 
thing— including  transactions  and  access— is 
completely  logged. 

One  of  the  primary  advantages  of  desktop 
virtualization  is  its  ability  to  keep  sensitive 
data  in  the  data  center.  Data  owners  can  ensure 
consistency,  backup,  disaster  recovery,  avail¬ 
ability  and  the  ability  to  make  endpoint  storage 


of  sensitive  data  irrelevant.  This  eliminates  a 
common  point  of  loss  and  the  need  for  breach 
notification  if  somebody  loses  their  device. 
Moreover,  offline  and  local  compute  usage 
models  are  available  that  enable  both  seamless 
access  to  public  data  and  strong  protection  of 
sensitive  data. 

How  can  the  deployment  of  desktop 
virtualization  simplify  and  enhance  the 
job  of  security  professionals? 

With  distributed  computing,  IT  had  no  idea 
of  what  sensitive  data  was  on  somebody’s  lap¬ 
top,  so  it  had  to  manage  every  laptop  as  if 
it  had  sensitive  data.  With  virtualization  in 
place,  security  measures  and  policies  ensure 
that  data  access  and  distribution  are  appro¬ 
priate  to  risk.  Security  managers  can  define 
policies  that  are  very  granular  to  make  sure 
everything  is  encrypted  and  continually 
monitored.  Data  leakage  protection  (DLP) 
and  other  advanced  security  measures  can  be 
enabled  for  a  particularly  sensitive  applica¬ 
tion  simply  through  integration  of  DLP  into 
the  data  center— without  the  need  to  install  a 
data  leakage  client  on  everybody's  personal 
device.  By  centralizing  the  data,  the  desktops 
and  the  applications,  IT  can  focus  on  watching 
the  vault,  as  opposed  to  having  to  watch  for  all 
sensitive  resources  on  all  the  computers  that 
could  potentially  access  it. 

How  can  the  deployment  of  desktop 
virtualization  benefit  employees  and 
other  consumers  of  corporate  data  and 
applications? 

Desktop  virtualization  removes  the  need  for 
all  consumers  to  be  their  own  IT  manager  and 
their  own  security  officer.  By  automating  data 
protection  and  freeing  users  from  mundane 
and  time-consuming  data  management  re¬ 
sponsibilities,  desktop  virtualization  makes  for 
greater  productivity  and  happier  users.  It  gives 
them  more  freedom  of  choice  to  use  multiple 
devices  and  also  enables  “workshifting,”  the 
ability  to  work  anywhere,  from  any  device  and 
in  any  situation.  Securely. 


Free  your  workforce.  Control  what  matters. 


Work  anywhere.  On  any  device.  We  call  that  virtual  computing. 

And  it’s  driven  by  virtualization  technologies  that  give  you  both 


freedom  and  control.  Virtual 

computing  frees  users  and  IT 
from  the  limitations  of 

the  traditional 
computing  model.  Give  IT 
control  over  what 
ruly  matters— delivering 
desktops,  applications 
and  data.  Securely. 

Say  yes  to  users  who  need 
to  work  whenever,  on  any  device  they  choose. 


Experience  the  power  of  virtual  computing. 
Simplicity  is  power.  Citrix. 


CiTRIX 

Citrix.com/SimplicitylsPower 


©  201 1  Citrix  Systems,  Inc.  All  rights  reserved.  Simplicity  is  Power  and  its  stylized  treatment  are  trademarte  of  Citrix  Systems,  Inc. 
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MESSAGING 


Survey:  Instant 
Messaging  Will 
Surpass  Email 


Dharmendra  Modha,  project  leader  at  IBM  Research,  says  IBM  and  its  research  partners 
have  developed  chips  with  “digital  neurons.” 


Many  CIOs  predict  that  real-time 
communication  technologies,  such 
as  instant  messaging,  SharePoint, 
Chatter  and  Yammer,  will  overtake 
classic  email  in  the  workplace  in  the 
next  five  years. 

That's  the  conclusion  of  a  Robert 
Half  Technology  survey  of  more 
than  1,400  CIOs  at  U.S.  companies 
with  more  than  100  employees.  The 
survey  was  released  last  month. 

More  than  half  (54%)  of  the  CIOs 
polled  said  real-time  workplace 
communication  tools  will  surpass 
traditional  email  in  popularity  with¬ 
in  five  years.  The  prediction  was  a 
bit  lukewarm,  however:  13%  of  the 
respondents  said  real-time  mes¬ 
sages  will  be  “much  more  popular” 
than  email,  while  41%  said  they’ll  be 
“somewhat  more  popular." 

Robert  Half  Technology,  an  IT 
staffing  firm,  said  a  transition  to 
real-time  tools  could  yield  work¬ 
place  benefits,  potentially  making 
it  easier  to  work  as  a  team,  solve 
problems,  share  ideas  and  manage 
documents. 

“Employers  are  looking  for  the 
right  people  to  deploy  these  tools 
in  new  ways  to  increase  efficiency," 
said  John  Reed,  executive  director 
of  Robert  Half 
Technology,  in  a 
statement.  “IT  pro¬ 
fessionals  should 
consider  the  importance  of  keeping 
current  with  real-time  technologies 
in  order  to  stay  competitive  in  the 
job  market." 

-  MITCH  BETTS 


BM  HAS  CREATED  prototype  chips  that 
could  mimic  brain-like  functions  —  a 
development  that  the  company  called 
an  “unprecedented”  step  toward 
creating  intelligent  computers  that  collect, 
process  and  understand  data  quickly. 

The  prototype  chips  will  help  computers 
make  decisions  by  collating  and  analyzing 
immense  amounts  of  data,  similar  to  the 
way  humans  understand  a  series  of  events, 
said  Dharmendra  Modha,  project  leader 
at  IBM  Research.  The  experimental  chips, 
which  contain  “digital  neurons,”  use  silicon 
circuitry  and  advanced  algorithms  to  mimic 
the  brain’s  structure  and  operation.  They 
consume  very  little  power. 

The  chips  were  developed  as  part  of  a  multi¬ 
year  cognitive  computing  research  project 
called  Systems  of  Neuromorphic  Adaptive 


Plastic  Scalable  Electronics,  or  Synapse. 

Like  the  brain,  IBM’s  prototype  chips 
can  dynamically  rewire  to  sense,  understand 
and  act  on  information  from  sensors,  as 
well  as  discover  patterns  based  on  probabili¬ 
ties  and  associations,  Modha  said. 

Future  applications  include  managing 
water  supplies  via  real-time  data  analysis 
and  generating  tsunami  warnings  based  on 
sensor  data,  he  said. 

IBM  and  its  research  partners 
have  already  used  the  prototypes  to 
simulate  activities  such  as  walking 
through  a  maze,  playing  a  game 
of  Pong  and  recognizing  patterns  in  data. 

The  researchers  are  working  toward  making 
them  capable  of  more  complex  tasks,  such  as 
recognizing  images  in  videos. 

-  Agam  Shah,  IDG  News  Service 
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Experimental  Chips  Mimic  Brain  Power 
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INNOVATION  #5,368 

Enhanced  Plane  Line  Switching  (PLS)  Panel  Technology 


Samsung  850  Series  PLS 


EXPERIENCE  OUR  NEW  LINEUP  OF  LED-BACKLIT  MONITORS  FOR  BUSINESS 

With  innovative  features  that  deliver  the  ultimate  viewing  experience  and  lower  TCO. 


200  Series  led 

Business-Minded, 

Budget-Focused 

•  Thin  bezel  with  slim  profile 

•  Samsung  MagicAngle  Technology 

•  VESA  mountable 


450  Series  LEE 
Office  Workhorse 

•  Height-adjustable  stand 
with  pivot  feature 

•  Detachable  power  adapter  with 
on/off  switch 

•  Samsung  MagicAngle  Technology 


650  Series  LEE 
Serious  Solution, 

Premium  Performance 

•  Multi-domain  Vertical  Alignment  (MVA) 
panel  technology 

•  Wide  178-degree  viewing  angle 

•  Proximity  and  auto  brightness  sensors 

•  Upgraded  height-adjustable  stand 
with  pivot  and  swivel  feature 


850  Series  lee 

Pro  Panel  for  Perfectionists 

•  Plane  Line  Switching  (PLS) 
panel  techology 

•  100%  sRGB  Color  Accuracy 

•  Wide  178-degree  viewing  angle 

•  Proximity  and  auto  brightness  sensors 

•  Upgraded  height-adjustable  stand 
with  pivot  and  swivel  feature 


Learn  more  ►  1-866-SAM4BIZ 


samsung.com/ledforbusiness  I  Business.  Innovated. 


©  2011  Samsung  Electronics  America.  Inc.  All  rights  reserved.  Samsung  is  a  registered  trademark  of  Samsung  Electronics  Co,  Ltd 
All  products  and  brand  names  are  trademarks  or  registered  trademarks  of  their  respective  companies.  Screen  images  simulated. 


"THE  WISE  MAN 

SOLVES  1,000 

PROBLEMS  WITH  A 

SINGLE 

SOLUTION." 


neness 


Switch  to  single-platform  Simpana®  software  for  truly 
modern  data  and  information  management. 

Year  after  year,  some  companies  stick  with  legacy  data  protection  software 
not  designed  to  handle  today's  IT  realities.  The  result?  Business  at  risk, 
frustrated  users,  out-of-control  costs,  and  compromised  business  agility.  In  a 
word,  insanity. 

With  its  revolutionary  single-platform  architecture,  Simpana  software  enables 
you  to  solve  these  problems  right  now  and  far  into  the  future.  It  will  lower 
operational,  labor,  and  infrastructure  costs,  streamline  integration  of  new 
technologies  like  virtualization  and  cloud  computing,  and  smooth  adaptation  to 
challenges  like  data  center  consolidation  and  eDiscovery  requirements. 

The  result?  Up  to  50%  reduction  in  storage-related  costs,  and  a  far  simpler, 
saner  way  to  manage,  access,  and  recover  business  information.  In  a  word, 
oneness. 

To  learn  how  you  can  do  far  more  with  less  and  add  real  value  to  your  end 
users  and  your  business  with  Simpana  software,  visit  AchieveOneness.com 
or  call  888-311-0365. 


OC2IF  commvault 

solving  forward' 


■ 


Backup  &  Recovery  Archive  Virtual  Server  Protection  Information  Governance  Deduplication  Disaster  Recovery  Search 


©1999  201 1  CommVault  Systems,  Inc.  All  rights  reserved.  CommVault,  the  "CV"  logo,  Solving  Forward,  Simpana,  and  AchieveOneness  are  trademarks  or  registered  trademarks  of  CommVaoli 
Systems,  Inc.  All  specifications  are  subject  to  change  without  notice.  ,  f  .  Y  ,!  ' 
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BETWEEN  THE  LINES 

By  John  Klossner 
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MOBILE  SECURITY 

Hackers  Find  Smartphones  Easy  Targets 


THE  BEST  way  to  protect  business 
information  on  smartphones  from 
cybercriminals  is  to  leave  that  infor¬ 
mation  off  smartphones,  a  mobile 
security  expert  said  last  month. 

Mobile  security  is  still  evolving,  and  smart¬ 
phones  are  vulnerable  to  hackers  and  social 
engineering  schemes,  said  Andrew  Hoog, 
chief  investigative  officer  at  viaForensics,  a 
security  vendor. 

Cybercriminals  are  starting  to  target  smart¬ 
phones,  Hoog  said  at  a  cybersecurity  summit 
in  Washington  hosted  by  the  Computing  Tech¬ 
nology  Industry  Association.  And  because  a 
smartphone  combines  personal  information 
and  corporate  data,  he  said,  “it  becomes  a 
much  richer  target.” 

ViaForensics  recently  reviewed  100  popular 
mobile  applications  and  found  that  83% 
of  those  apps  either  warranted  a  security 
warning  from  the  company  or  failed  the  com¬ 
pany’s  basic  security  tests  because  they  stored 
sensitive  data  insecurely,  he  said. 
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The  security  failures  included  storing  data 
and  passwords  in  unencrypted  form.  “We’re 
recovering  enormous  amounts  of  data  on 
these  devices,”  Hoog  said. 

Part  of  the  problem  is  that  employees  are 
bringing  in  a  wide  variety  of  mobile  devices  to 
use  in  business  settings  and  IT  departments 
no  longer  have  control  over  the  technology, 
added  Brian  Contos,  director  of  global  security 
and  risk  management  at  McAfee. 

In  addition,  mobile  app  and  OS  developers 
want  to  make  their  products  extremely  easy 
to  use,  said  Allan  Friedman,  research  director 
at  the  Center  for  Technology  Innovation  at 
the  Brookings  Institution.  Criminals  using 
spyware  and  other  schemes  count  on  split- 
second  decisions  by  smartphone  users,  he  said. 

“The  challenge  for  security  is  that,  [in 
order]  to  have  someone  make  a  good  decision, 
you  need  to  force  cognition  —  you  need  to 
actually  make  them  think,”  Friedman  said. 
“This  is  the  opposite  of  usability.” 

-  Grant  Gross,  IDG  News  Service 


According  to  a  study  of 
1,471  big  IT  projects, 

15% 

turnout  to  be  money 
pits,  with  cost  overruns 
averaging  200%. 
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RESEARCH  RECAP 

Oversupply 
Triggers  Drop 
In  RAM  Prices 

The  price  of  DDR3  memory  chips 
used  in  laptops,  desktops  and 
servers  will  drop  over  the  next  two 
months  as  memory  companies  try 
to  clear  out  excess  inventory  in  a 
slowing  PC  market,  IT  research  firm 
IHS  iSuppli  reported  on  Aug.  29. 

The  average  selling  price  of  DDR3 
RAM  with  a  2-gigabit  density  will 
reach  $1.60  later  in  the  third  quar¬ 
ter,  down  from  $2.10  today,  said 
iSuppli  in  a  research  note.  The  price 
of  DDR3  DRAM  was  about  $4.70  in 
the  third  quarter  a  year  ago. 

The  price  could  plummet  further, 
to  $1.25  in  the  fourth  quarter,  said 
Mike  Howard,  an  analyst  at  iSuppli. 

A  shortfall  in  PC  demand  has 
softened  DDR3  memory  pricing  this 
year,  and  PC  makers  are  unwilling 
to  add  more  memory  to  computers 
as  they  try  to  increase  profitability 
in  the  low-margin  market,  Howard 
said.  Some  memory  makers  will 
move  excess  inventory  into  the 
market  rapidly,  which  could  lead  to 
further  price  drops. 

The  DRAM  market  fell  apart  dur¬ 
ing  the  economic  downturn  at  the 
end  of  2008,  resulting  in  today’s 
oversupply,  according  to  Howard. 
“It’s  a  double  whammy,"  he  said.  “PC 
growth  has  slowed  down  and  users 
aren't  demandingmore  memory." 

-  AGAM  SHAH. 
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MillerCoors  Turns  to 
Tech  to  Retain  Workers 


Aiming  to  stem  losses  of  female  employees,  the  brewer  uses 
social  networking  tools  to  offer  mentoring  programs  for 
saleswomen  in  far-flung  locales.  By  Sharon  Gaudin 


MILLERCOORS  has  turned  to  social  networking 
tools  in  an  effort  to  stem  an  exodus  of  female 
salespeople.  Executives  at  the  country’s  second- 
largest  beer  brewer  wanted  to  make  far-flung 
female  sales  reps  feel  less  isolated  and  more  a  part 
of  a  cohesive  team. 

Samantha  Morris,  a  MillerCoors  associate  industrial  organiza¬ 
tion  psychologist,  said  the  brewer  realized  about  a  year  ago  that 
women  in  sales  positions  were  leaving  the  company  at  a  much 
faster  rate  than  their  male  counterparts. 

Working  alone  was  an  issue  for  some,  while  others  were 
having  trouble  with  schedules  that  often  required  them  to  make 
sales  calls  at  bars  at  night  or  on  weekends. 

The  problem  was  discovered  as  MillerCoors  launched  an  effort 
to  attract  more  women. 


“We  realize  that  demographically 
were  at  a  disadvantage,”  Morris  said. 
“We  have  24%  women  overall.  For 
most  of  the  best  companies  —  the 
top  100  companies  —  the  average 
is  about  48%  women.  We  want  the 
different  thinking  styles  and  abilities 
that  women  can  bring  to  the  table.” 

Chicago-based  MillerCoors 
employs  about  8,500  people. 

The  company  last  fall  expanded 
its  use  of  Open  Mentoring  social 
networking  tools  from  Denver-based 
Triple  Creek  to  improve  communica¬ 
tion  between  employees  in  far-flung 
locales  and  office-based  managers. 

Jim  Ebert,  a  leadership  develop¬ 
ment  manager  at  MillerCoors, 
noted  that  the  company  had  already 
successfully  used  the  Triple  Creek 
technology  for  one-on-one  mentor¬ 
ing  in  other  departments. 

Last  October,  the  company 
launched  a  group  mentoring 
program  called  Women  of  Sales,  in 
which  45  female  sales  representa¬ 
tives  were  split  into  three  groups 
of  15.  Each  group  had  two  mentors, 
either  female  executives  or  others  in 
leadership  roles. 

“I  wouldn’t  say  it’s  the  equivalent 
[of  working  alongside  other  people], 
but  it  gets  the  job  done,”  Morris  said. 
“The  women  are  having  an  opportu¬ 
nity  to  connect  with  other  people  in 
the  business  who  have  similar  roles, 
similar  concerns,  similar  aspirations.” 
Morris  and  Ebert  said  the  benefits  of  the  program  haven’t 
yet  been  fully  calculated,  though  early  returns  show  a  1.85% 
decrease  in  turnover  from  the  six-month  period  prior  to  the  pro¬ 
gram’s  kick-off  to  the  six-month  period  after  the  program  ended. 

Both  said  they’ve  received  positive  feedback  and  noted  that  most 
of  the  45  women  in  the  pilot  program  have  remained  connected. 

Ezra  Gottheil,  an  analyst  at  Technology  Business  Research, 
said  social  networks  can  cut  a  company’s  costs  and  make  iso¬ 
lated  employees  feel  like  a  part  of  the  team.  “If  the  workers  are 
isolated,  social  platforms  can  be  very  effective  in  building  group 
cohesion,”  Gottheil  said. 

If  the  program  does  help  retain  workers,  he  added,  Miller¬ 
Coors  could  save  on  recruiting  and  training  costs  as  well. 

Ebert  said  the  successful  sales  program  prompted  MillerCoors 
to  launch  similar  mentoring  initiatives  in  other  departments.  ♦ 
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The  women  are  having  an  opportunity  to  connect  with  other  people  in  the  business 

who  have  similar  roles,  similar  concerns,  similar  aspirations. 
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WHO’S  WATCHING  YOUR  BUSINESS  BETWEEN  THE  DOTS? 


As  your  business  increasingly  depends  on  your  network,  keeping  it  safe  and  available  is  vital.  As  the  Internet 
infrastructure  company  trusted  to  run  .com  and  .net  for  more  than  a  decade,  Verisign  can  offer  you  that  confidence 
with  Verisign®  DDoS  Protection  Services.  This  cloud-based  solution  continuously  monitors  and  protects  your 
sites,  helping  to  mitigate  large-scale  distributed  denial-of-service  (DDoS)  attacks.  Discover  how  our  industry¬ 
leading  technology,  Internet  scale,  and  DDoS  expertise  can  help  keep  your  business  connected  between  the  dots. 


Download  the  “DDoS  Getting  the  Attention  It  Deserves”  white  paper 
and  keep  your  site  connecting  to  customers  at  Verisignlnc.com/guard. 


©  201 1  VenSign,  Inc.  All  rights  reserved.  VERISIGN,  the  Verisign  logo,  and  other  trademarks,  service  marks,  and  Verisign  designs  are  registered  or  unregistered 
trademarks  of  VerrSign,  Inc,  and  its  subsidiaries  in  the  United  States  and  in  foreign  countries.  All  other  trademarks  are  property  of  their  respective  owners. 
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If  costs  were 
cheaper,  I’d  put 
ev  rything  on  SSD  drives. 

Hi.  MANAGER  OF  NETWORK 
ENGINEERING,  QUARLES  &  BRADY 


IT  Moving  to  SSD 
For  Robust  Apps 


DESPITE  ITS  HIGH  PRICE  TAG,  solid-state  storage  tech¬ 
nology  is  increasingly  becoming  a  viable  option  for 
large  and  midsize  companies  looking  to  ease  bottle¬ 
necks  caused  by  high-transaction  databases,  virtual¬ 
ized  systems  and  other  I/O-intensive  applications. 
Tucson  Electric  Power,  for  example,  used  Performance  Ac¬ 
celeration  Module  flash  cards  from  NetApp  to  significantly  boost 
the  performance  of  its  PeopleSoft  and  Oracle  customer  care  and 
billing  reporting  systems,  said  Tony  Edlebrock,  senior  systems 
administrator  at  the  Arizona  utility. 

Edlebrock  credits  the  flash  technology  with  cutting  the  length 
of  nightly  Oracle  and  PeopleSoft  batch  processes  in  half,  from 
eight  to  12  hours  to  four  to  six  hours. 

In  addition  to  using  flash  cards  on  the  front  end  of  all  of  its 
PeopleSoft  and  Oracle  tools,  the  utility  is  also  using  the  tech¬ 
nology  as  front-end  cache  for  most  of  its  500  VMware  virtual 
machines  as  well  as  its  GIS  mapping  systems  and  the  databases 
used  to  manage  power  outages. 

Chris  Rima,  supervisor  of  IT  infrastructure  systems  at  Tucson 
Electric,  a  subsidiary  of  UniSource  Energy,  suggested  that, 
because  SSD  cards  are  so  expensive,  IT  managers  should  use 


them  for  multiple  purposes,  not  just  a  single  task. 
He  said  Tucson  Electric  paid  $30,000  for  each  of 
its  six  40TB-60TB  NAND  flash  cards. 

Rima  added  that  the  company  is  now  in  the 
process  of  deciding  whether  to  purchase  SSD 
storage  arrays  from  Nimbus  Systems  some  time 
next  year. 

Online  auctioneer  eBay  rolled  out  a  dozen  of  the 
Nimbus  arrays  earlier  this  year  and  experienced 
a  50%  reduction  in  standard  storage  rack  space, 
a  78%  drop  in  power  consumption  and  a  fivefold 
boost  in  I/O  performance  compared  with  its  previ¬ 
ous  network-attached  storage  and  storage  area 
network  systems. 

The  speed  boost  allows  eBay  to  bring  a  new 
virtual  machine  online  in  five  minutes,  compared 
with  45  minutes  previously,  according  to  Michael 
Craft,  eBay’s  manager  of  quality  assurance  systems 
administration. 

As  NAND  prices  fall  over  the  next  few  years, 
analysts  are  expecting  more  IT  executives  to  turn 
to  SSD  technology.  IDC  predicts  the  enterprise- 
class  SSD  market  will  grow  to  about  $1.8  billion  in 
2012,  up  from  $850  million  in  2010. 

SSDs  use  nonvolatile  NAND  flash  memory  chips,  which  are 
cheaper  than  DRAM  chips  but  still  as  much  as  18  times  more 
expensive  than  15,000-rpm  Fibre  Channel  or  serial  SCSI  drives, 
according  to  Gregory  Wong,  an  analyst  at  market  research  firm 
Forward  Insights. 

Wong  expects  prices  to  continue  falling  as  the  use  of  solid-state 
and  NAND  flash  card  technology  in  popular  consumer  devices 
increases.  Wong  predicted  a  dramatic  jump  in  consumer  use 
of  devices  featuring  the  technology  by  the  end  of  next  year,  at 
which  time,  he  added,  SSD  pricing  will  drop  to  the  magic  $1  per 
gigabyte  level.  That  price  should  significantly  boost  corporate  use 
as  well,  he  said. 

Quarles  8c  Brady,  a  Chicago-based  law  firm,  has  been  gradually 
adding  SSD  cards  to  its  EqualLogic  arrays  over  the  past  two  and  a 
half  years,  first  for  its  transactional  databases  and  then  to  support 
its  virtualization  technology.  The  SSD  cards  significantly  boosted 
performance  in  both  instances,  according  to  Rich  Raether, 
manager  of  network  engineering  at  the  firm. 

Raether  said  he’s  very  impressed  with  the  technology  —  if  not. 
its  price  tag.  “If  costs  were  cheaper,”  he  said,  “I’d  put  everything 
on  SSD  drives.”  ♦ 


Companies  use  solid-state  storage  to  boost  the 
performance  of  high-transaction  databases,  enterprise 
apps  and  virtualized  systems.  By  Lucas  Mearian 
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unbridled  innovation  with  the 
power  of  convergence. 


HP  Converged  Infrastructure  ignites  what's  next  with  HP  ProLiant  servers. 

Get  ready  for  a  breakthrough  in  the  way  computing  serves  your  business.  With  ROI 
in  as  little  as  2  months*  HP  ProLiant  DL380  G7  servers  and  FlexFabric  Converged 
Networking  enabled  HP  ProLiant  BL460c  servers  powered  by  the  Intel®  Xeon® 
processor  5600  series  offer  a  dramatic  upgrade  over  your  old  infrastructure. 

By  utilizing  new  breakthroughs  in  management  efficiency,  you'll  be  able  to 
maximize  productivity  and  savings  while  you  accelerate  the  pace  of  innovation. 


Scan  this  QR  code  with  your  mobile  device  to  learn  how 
HP  Insight  Control  can  help  you  turbocharge  productivity 
with  the  white  paper  Gaining  Business  Value  and  ROI 
with  HP  Insight  Control  Management  Software,  or  visit 

hp.com/go/turbochargel6 


HP  ProLiant  BL460c  G7  server 

•  Two  six-core  Intel'  Xeon'  processors  5600  series  (2.53GHz)  installed 

•  16GB  of  memory;  expandable  up  to  384GB  of  memory 

•  Smart  Array  Controller  P410i 

•  One  integrated  NC553i  Dual  Port  10Gb  FlexFabric  Converged 
Network  Adapter 

•  Up  to  two  HP  hot  plug  small  form  factor  SAS,  SATA,  or  Solid  State  Drives 

$4,199  (Save  $677) 

Lease  for  just  $102/mo.: 

Buy  (PN:  630442-S01) 


HP  ProLiant  DL380  G7  server 

•  One  quad-core  Intel ;  Xeon  '1'  processor  5600  series  (2.40GHz) 

•  6GB  of  memory;  expandable  up  to  384GB  of  memory 

•  HP  Smart  Array  P410i  Controller  with  512MB  Flash  Backed  Write 
Cache  installed 

•  Up  to  eight  HP  hot  plug  small  form  factor  SAS  or  SATA  drives 

$2,674  (Save  $542) 

Lease  for  just  $65/mo.1 

Buy  (PN:  605877-005) 


'  Based  on  HP  Internal  tests  comparing  HP  ProLiant  DL380  G4  single-core 
servers  to  HP  ProLiant  G7  quad-core  servers  powered  by  the  Intel  Xeon' 
processor  5600  series. 

Prices  subject  to  terms  and  conditions.  For  further  details,  visit 
hp.com/go/turbochargel6 

Copyright  201 1  Hewlett  Packard  Development  Company,  I  P.  The  information 
contained  herein  is  subject  to  change  without  notice.  The  only  warranties 
for  HP  products  and  services  are  set  forth  in  the  express  warranty  statements 
accompanying  such  products  and  services.  Nothing  herein  should  be 
construed  as  constituting  an  additional  warranty.  HP  shall  not  be  liable 
for  technical  or  editorial  errors  or  omissions  contained  herein. 
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Clifford 

Gronauer 


By  sharpening  the 
RFP  process  on  a 
multisystem  overhaul, 
this  CIO  scored  deals 


What  are  your  career  highlights? 

Former  chairman  of  the  Audrain 
County  Emergency  Services  Board, 
which  manages  the  county’s  joint 
communications  and  9-1-1  services, 
and  adjunct  faculty  member  at 
Columbia  College  in  Missouri. 

What’s  the  most  promising 
technology  on  the  horizon? 

Speech  recognition. 

What  do  you  do  in  your  spare 
time?  Golfing  and  gardening. 

What’s  the  best  piece  of  advice 
you’ve  ever  received? 

Your  best  career  choice  is  to  not 
always  follow  the  money. 

What’s  the  best  piece  of  advice 
you  ever  gave?  Don’t  put  your  hands 
in  the  dog’s  mouth.  Never  assume 
you  know  it  all. 


SOON  AFTER  Clifford  Gronauer  took  the  CIO  post  at  the  Missouri  State  Highway  Patrol 
in  2001,  he  realized  the  agency  needed  a  major  technology  overhaul  to  better  support 
the  10,000  workers  using  its  various  applications.  So  he  and  his  team  decided  to 
replace  all  five  of  the  organizations  major  systems,  which  are  used  for  computer-aided 
dispatch,  mobile  client  needs,  records  management,  the  statewide  message  switch  and  managing 
criminal  history  information.  Replacing  the  systems  one  by  one  would  have  been  a  monumental 
undertaking,  but  Gronauer  took  the  project  a  step  further  and  decided  to  replace  them  all  at  once. 
His  leadership  in  guiding  his  department  through  that  undertaking  earned  him  a  nod  as  a  finalist 
for  the  Award  for  Innovation  Leadership  at  the  2011  MIT  Sloan  CIO  Symposium. 


Why  did  you  replace  all  five  systems  simultaneously?  We  actually  had  planned  to  do 

more  of  a  sequential  implementation,  but  along  about  the  time  we  were  about  to  issue  ' 

Continued  on  page  20 
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Continued  from  page  18 
our  RFPs,  there  was  a 
federal  grant  program 
announced  through 
the  Department  of 
Justice.  We  had  about 
two  weeks  to  write  up 
a  grant  proposal  and 
submit  it,  and  about 
a  month  later  we  got 
word  we  were  ap¬ 
proved.  We  got  a 
$6  million  federal 
grant.  Now  the  kicker 
on  these  is  that  they 
come  with  a  time  frame 
attached,  so  we  kind 
of  huddled  and  asked, 
“Can  we  do  this?”  We 
came  to  the  conclusion 
that  if  we  organized  it 
and  managed  it  well, 
we  thought  we  could 
pull  it  off. 

Did  the  funding  cover 
all  five?  No,  not  even 
close,  but  it  was  more 
than  just  seed  funding. 

It  was  a  substantial 
amount  of  money.  We 
actually  hired  a  consult¬ 
ing  firm  to  come  in 
and  help  us  do  the  RFP 
process,  and  their  initial 
guesstimate  based  on 
previous  projects  was 
that  just  one  of  these 
modules  would  cost  us 
$15  million.  It  turned 
out  not  to  be  the  case, 
and  we  take  some  of 

the  credit  for  that  because  we  developed  our  RFP  in  a 
very  different  fashion  than  most  and  we  hit  the  market 
when  it  was  kind  of  at  a  soft  point,  so  it  kept  the  cost 
on  the  project  lower  than  it  had  been  historically. 


We  came  to  the 
conclusion  that 
if  we  organized 
[the  project] 
and  managed  it  well,  we 
thought  we  could  pull  it  off. 


What  was  the  total  cost?  About  $12  million. 


What  made  your  RFP  process  economically  benefi¬ 
cial?  We  threw  a  couple  things  in  there  that  made  it 
different.  Rather  than  asking  for  the  sun,  the  moon 
and  stars,  we  wanted  the  basic  off-the-shelf  software 
cost,  and  if  and  when  we  determined  we  needed 
any  kind  of  customization,  we  would  handle  those 
requests  separately  at  a  later  date.  We  found  that  a 
lot  of  agencies  that  did  these  projects  laid  out  their 
requirements  and  the  vendors  bid  the  project  all  at 
one  time.  By  eliminating  all  of  that  up  front,  we  got 


a  very  economical  cost  factor  from  all  of  the  vendors. 
Then  we’ve  been  very  selective  in  the  upgrades  or 
customizations  that  we  required.  And  in  several  of 
those  instances,  we  were  able  to  convince  the  vendors 
that  if  you  build  this  for  us,  it  would  be  a  very  useful 
enhancement  for  the  rest  of  your  customers,  so  we 
were  able  to  get  some  of  our  customizations  done  at 
no  additional  charge.  The  other  thing  we  did  was  we 
built  the  RFPs  under  the  initial  assumption  that  the 
state  would  be  the  primary  user  but  that,  if  possible, 
we’d  like  to  be  able  to  offer  this  as  a  service  to  other 
[law  enforcement  agencies  in  the  state].  Vendors  saw 
it  as  an  opportunity  and  gave  us  a  deal  up  front. 

What  were  the  biggest  rewards  in  upgrading  all  five 
at  once?  The  biggest  rewards  were  making  the  road 
officers  more  efficient.  It  really  made  a  tremendous 
reduction  in  the  amount  of  clerical  work  that  the 
officers  had  to  do. 

What  was  the  biggest  challenge?  Procurement. 

Most  of  my  career  has  been  in  the  private  sector,  and 
purchasing  is  very  different  in  a  government  setting. 
It’s  filled  with  red  tape  and  other  challenges.  I  can 
see  why  they’re  there,  but  it  really  delays  and  makes 
things  more  difficult. 

Is  there  something  in  that  process  that  others  can 
learn  from?  The  biggest  challenge  we  were  up  against 
was  being  very  careful  about  a  couple  of  words:  must 
and  shall.  You  have  to  be  very  careful  about  how 
those  get  applied,  because  those  two  words  imply 
require.  So  something  that  might  have  been  a  very 
desirable  feature  or  component,  if  you  put  must  and 
shall  [and]  someone  cannot  offer  that,  they  automati¬ 
cally  become  disqualified.  We  actually  had  folks 
going  through  the  RFPs  to  highlight  those  words,  and 
then  we  went  through  them  one  at  a  time  and  asked, 
“Is  that  really  what  we  want?”  because  once  you  dis¬ 
qualify  a  vendor,  that’s  it,  they’re  out  of  the  picture. 

What  were  the  keys  to  leading  your  IT  staff  through 
such  an  undertaking?  There  were  some  folks  who 
were  really  supportive  and  excited  about  doing 
something  new,  different,  better.  And  you  had  some 
who  were  very  fearful,  asking  “What  am  I  going  to 
do  now?”  So  we  had  to  go  through  that  assurance 
program  with  those  folks  to  let  them  know  we’d 
provide  whatever  training  to  get  them  up  to  speed, 
that  we  were  going  to  make  that  investment  because 
the  biggest  hurdle  on  these  things  is  the  business 
knowledge.  I  can  take  someone  who  knows  all  about 
the  criminal  justice  system  and  how  the  data  flows  and 
train  them  on  the  new  technology  and  I’m  way  ahead 
of  the  curve  than  with  someone  who  knows  the  tech¬ 
nology  but  has  no  clue  on  how  police  work  goes. 

—  Interview  by  Computerworld  contributing  writer 
Mary  K.  Pratt  (marykpratt@verizon.net) 
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-  OPINION 


PRESTON  GRALLfl 

Microsoft  Finally  Gets  It: 
Windows  Is  Not  the  Future 


Windows  is 
still  a  cash 
cow,  but 
it  is  not  a 
high-growth 
business.  It's 
the  past,  not 
the  future. 


Preston  Gralla  is  a 

Computerworld.com 
contributing  editor 
and  the  author  of 
more  than  35  books, 
including  How  r/7e 
Internet  Works 
(Que,  2006). 


WHEN  YOU  THINK  MICROSOFT,  you  think  Windows.  Once  upon  a 
time,  that  was  a  good  thing.  In  recent  years,  though,  this  over¬ 
reliance  on  Windows  has  been  holding  back  the  company,  inhib¬ 
iting  its  ability  to  break  into  high-growth  markets.  But  there  are 


signs  that  Microsoft  finally  recognizes  that  its 
future  lies  not  in  Windows,  but  elsewhere. 

CEO  Steve  Ballmer  has  repeatedly  said  that 
Microsoft’s  future  is  bound  up  with  Windows. 

At  the  Microsoft  Worldwide  Partner  Conference 
in  July,  he  was  crystal  clear  about  that,  saying  in 
his  opening  speech,  “Windows  is  the  backbone 
product  of  Microsoft.  Windows  PCs,  Windows 
Phones,  Windows  slates.  Windows,  Windows, 
Windows,  Windows,  Windows.” 

Windows  has  certainly  been  good  to  Microsoft, 
and  it’s  still  a  cash  cow  that  will  be  milked  well 
into  the  foreseeable  future,  and  likely  beyond. 

But  it  is  not  a  high-growth  business.  It’s  the  past, 
not  the  future.  The  real  growth  is  elsewhere  —  in 
smartphones,  for  example.  And  there,  the  use  of 
the  Windows  brand  hurts  the  company.  Gartner 
found  that  Windows  Phone  7  suffers  from  the 
“your  dad  uses  it”  syndrome:  For  younger  people, 
the  perception  that  their  parents  use  a  Microsoft 
phone  at  work  makes  them  less  likely  to  buy  it. 

Relying  on  Windows  as  its  tablet  operating 
system  holds  back  Microsoft  as  well,  because  it  has 
to  wait  for  the  release  of  Windows  8  for  serious 
tablets  to  be  built.  By  that  time,  Google’s  Android 
and  Apple’s  iOS  will  have  the  market  sewn  up. 

If  any  more  evidence  is  needed  that  Windows  is 
Microsoft’s  past,  look  at  its  most  recent  quarterly 
earnings.  Microsoft  had  a  breakout  period,  even 
though  Windows  sales  fell  1%  —  the  second 
quarter  in  a  row  they  dropped.  A  very  bright  spot 
was  revenue  from  Xbox  360  and  Kinect,  sales  of 
which  jumped  30%  over  the  previous  quarter. 

Despite  Ballmer’s  bluster  about  Windows, 


Microsoft  clearly  recognizes  that  it  has  to  get 
serious  about  high-growth  areas  and  not  focus 
just  on  Windows.  Last  month,  Frank  X.  Shaw, 
a  Microsoft  corporate  communications  execu¬ 
tive,  blogged  about  Microsoft’s  vision  of  TV  and 
entertainment.  In  a  post  titled  “The  Future  of  the 
Living  Room,”  he  wrote,  “Integration  of  products 
and  services  like  Xbox,  Kinect  and  Bing  is  at  the 
heart  of  our  strategy.”  He  describes  a  world  in 
which  you  use  Kinect,  Xbox  and  Bing  to  interact 
with  your  TV  and  entertainment  devices  using 
gestures  and  your  voice.  Windows  isn’t  mentioned 
even  once  in  the  post  or  an  accompanying  video. 

More  recently,  Microsoft  launched  an  all-out 
blitz  to  get  customers  to  sign  up  for  its  premier 
cloud-based  service,  Microsoft  Dynamics  CRM 
Online,  offering  $150  per  seat  to  switch  from 
competitors  Oracle,  Salesforce.com  and  SAR  That 
works  out  to  a  tidy  $75,000  for  a  company  buying 
500  seats.  Microsoft  recognizes  the  importance 
of  the  cloud:  In  a  blog  post  announcing  that  plan, 
it  cited  a  Forrester  Research  prediction  that  the 
global  cloud  market  will  rise  from  $40.7  billion  in 
2011  to  more  than  $241  billion  in  2020. 

Does  all  this  mean  that  Microsoft  is  abandon¬ 
ing  Windows?  Certainly  not.  There  are  billions  of 
dollars  to  be  made  from  the  operating  system,  and 
Microsoft  isn’t  about  to  walk  away  from  that.  But 
Microsoft  finally  seems  to  be  slowly  recognizing 
that  keeping  Windows  as  the  heart  and  soul  of  the 
company  is  a  mistake.  It  may  finally  be  breaking 
out  of  the  Windows-everywhere  mindset,  and 
that’s  a  good  thing  for  anyone  who  cares  about  the 
future  of  the  company.  ♦ 
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SPOTLIGHT  BUSINESS  INTELLIGENCE 


The  combination 
of  predictive 
analytics  and 
social  media  is 
helping  retailers 
anticipate  the 
whims  of  fashion 
—  and  pick  next 
seasons  winners. 

BY  ROBERT  L. 

MITCHELL 


ELIE  TAHARI,  the  upscale 

women’s  fashion  brand  and 
retail  chain,  has  a  pretty 
good  idea  which  of  its  styles 
customers  will  want. 

There’s  no  wizardry,  no 
crystal  ball.  The  retailer  relies 
on  the  science  of  predictive 
analytics,  using  technologies 
from  IBM  to  forecast  demand 
for  its  line,  which  it  sells 
through  Nordstrom  and  other 
high-end  retail  stores.  The  tools  pull  data  from 
a  continuously  updated  data  warehouse  to 
forecast  what  needs  to  ship  to  each  store  every 
week,  right  down  to  the  styles,  colors  and  sizes 
each  location  will  need  to  meet  demand. 
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Maybe  tie-dye  is  going  to  be  huge  or  pink  will  be  big.  Those  are  decisions 
that  the  merchant  has  always  made,  but  that  can  be  assisted  with 
sophisticated  algorithms  that  point  out  patterns  that  [they]  may  have  missed. 

CATHY  HOTKA,  PRINCIPAL,  CATHY  HOTKA  &  ASSOCIATES 


“That  protects  the  customer,  ensuring  that  any  style  or  color 
they  order  is  in  stock,  but  also  protects  us  so  we  don’t  overpro¬ 
duce,”  says  Nihad  Aytaman,  director  of  business  applications  at 
Elie  Tahari. 

Analytics  have  made  an  indelible  mark  on  the  retail  fashion 
business  over  the  past  decade,  helping  with  everything  from 
predicting  the  best  pricing  and  markdown  strategies  to  forecast¬ 
ing  the  right  mix  of  products,  colors  and  sizes  for  every  location. 
There’s  one  critical  area,  though,  that  Elie  Tahari  and  many  other 
retailers  and  designers  still  don’t  use  predictive  analytics  for: 
choosing  which  new  styles  will  be  next  season’s  winners. 

But  thanks  to  new  technologies,  that  could  be  changing. 

“Maybe  tie-dye  is  going  to  be  huge  or  pink  will  be  big.  Those 
are  decisions  that  the  merchant  has  always  made,  but  that  can 
be  assisted  with  sophisticated  algorithms  that  point  out  patterns 
that  [they]  may  have  missed,”  says  Cathy  Hotka,  principal  of 
retail  consulting  firm  Cathy  Hotka  &  Associates. 

Predictive  analytic  tools,  which  rely  on  historical  data  to  make 
future  demand  projections  for  any  given  product,  can  play  a 
role  even  in  predicting  the  whims  of  fashion.  But  right  now,  the 
hottest  area  for  picking  fashion  winners  lies  at  the  intersection  of 
analytics  and  social  media. 

While  predictive  analytics  can  help  identify  fashion  winners, 
most  merchandisers  aren’t  using  the  technology  for  that  purpose, 
for  two  reasons:  Unlike  products  that  are  carryovers  or  that  will 
simply  be  revised  for  the  next  season,  new  fashions  don’t  have  the 
historical  sales  data  that  predictive  analytic  tools  need  to  work 
their  magic,  and  retail  buyers  are  wary  of  allowing  science  to 
intrude  on  the  art  of  picking  fashion  winners.  “For  us  right  now, 
key  styles  are  picked  by  merchants  in  their  discussions  with  design¬ 
ers,  who  present  products  that  are  inspired  by 
trends  and  what’s  happening  in  the  world,”  says 
Louise  Callagy,  a  spokesperson  for  Gap  Inc.  But 
Gap  expects  analytics  to  play  a  bigger  role  in  the 
future.  “Although  it’s  in  the  early  stages,  we  apply 
analytics  from  our  early  online  sales  globally  and 
in  certain  markets  to  help  gauge  a  better  read  of 
what  we  predict  will  sell  in  stores,”  she  says. 

High-stakes  Game 

“Computer-aided  fashion  projections  are  some¬ 
thing  everyone  is  talking  about,”  says  David 
Wolfe,  creative  director  at  The  Doneger  Group, 
which  predicts  fashion  trends  the  old-fashioned 
way:  using  seasoned  experience  and  insight. 

But  it’s  a  high-stakes  decision  for  merchandisers 
and  fashion  designers  —  and  one  that  can  be 
tricky  to  get  right.  Fashion  retailers  stake  their 


fortunes  on  the  experience,  intuition  and  gut  instincts  of  an  elite 
cadre  of  buyers.  For  smaller  retailers,  the  effect  of  a  buyer  who 
loses  his  mojo  can  be  devastating  to  the  bottom  line. 

“Apparel  is  a  very  fickle  business.  If  you  miss  one  season,  you 
can  go  under,”  says  Aytaman.  Most  buyers  simply  don’t  trust  tech¬ 
nology  to  do  the  job.  So  they  turn  to  consultants  like  The  Doneger 
Group  for  predictions  as  to  what  colors  and  styles  will  be  in  —  and 
what  will  be  out.  Those  insights,  in  turn,  are  based  on  experience, 
intuition  and  regular  visits  to  designers  and  fashion  shows. 

Adding  to  the  pressure  is  the  fact  that  the  consumer  market 
has  fragmented  and  shoppers  are  less  willing  to  embrace  styles 
dictated  from  the  runway  or  by  designers  and  retailers.  Just  19% 
of  consumers  listen  to  manufacturers  or  retailers  these  days, 
according  to  an  IBM  survey.  Consumers  today  tend  to  make  their 
own  decisions  about  fashion,  in  conjunction  with  their  peers. 
More  than  ever,  the  industry  needs  to  listen  to  the  customer. 

The  Elements  of  Style 

The  problem  with  using  predictive  analytics  to  forecast  fashion 
trends,  says  Aytaman,  is  that  the  accuracy  of  those  predictions 
varies  in  direct  proportion  to  the  amount  of  historical  data  that 
can  be  fed  into  the  model.  So  while  Elie  Tahari  uses  analytics  to 
determine,  for  example,  demand  for  its  business-suit  line,  which 
doesn’t  change  much  from  year  to  year,  it  doesn’t  use  the  technol- 
ogy  to  pick  more  seasonal,  fashion-oriented  items,  such  as  dresses 
and  sportswear.  “We  can’t  accumulate  enough  history  to  really 
do  something  like  this,”  he  says. 

While  it’s  true  that  a  new  design  may  have  no  historical  analog 
on  which  to  model  success,  merchandisers  can  break  down  the 
key  attributes  that  describe  a  given  fashion  —  everything  from 
color  to  collar  size  —  and  perform  a  regression 
analysis  on  those.  In  other  words,  merchandis¬ 
ers  can  perform  a  statistical  analysis  on  all 
of  the  variables  that  describe  the  new  style, 
assuming  historical  data  is  available,  to  project 
whether  the  item  will  be  hot  or  not. 

“Using  attributes  and  supplementing  that 
with  what  you  see  as  fashion  trends,  again  as 
attributes,  is  pretty  cutting  edge,”  says  Saurabh 
Gupta,  director  of  retail  solutions  at  IBM.  And 
while  there  may  not  be  enough  historical  data  to 
create  models  for  every  attribute,  he  says  some 
fashion  elements  do  have  predictable  cycles.  “A 
color  stays  popular  for  a  year  at  least,  and  you 
can  derive  insight  from  that,”  Gupta  says. 

And  retailers  can  enhance  models  with 
knowledge,  such  as  the  fact  that  certain  types  * 
of  fabrics  are  becoming  less  attractive  to  buyers. 


Wolfe:  Computer-aided 
predictions  are  the  talk 
of  the  fashion  world. 
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“It’s  about  bringing  in  extra  evidence,  not  one  killer  attribute,” 
says  Colin  Linsky,  predictive  analytics  worldwide  retail  sector 
leader  at  IBM.  But  the  real  value  of  predictive  analytics  in 
fashion  is  not  just  that  it  can  pick  winners,  Linsky  says.  “It  also 
gives  a  strong  indication  of  the  why,  and  that’s  important  in 
understanding  what  you  should  be  doing  when  making  merchan¬ 
dising  decisions,”  he  says. 

On  the  other  hand,  predictive  analytics  doesn’t  always  work  as 
well  when  a  new  fashion  doesn’t  follow  previous  patterns,  when 
there’s  limited  or  no  historical  data  for  key  attributes,  or  when 
the  style  falls  into  a  different  line,  such  as  when  it  moves  from 
dresses  to  sweaters,  says  the  CIO  of  a  large  fashion  designer  and 
retailer  that  sells  online  and  through  more  than  500  stores,  who 


What's  That 
You're  Wearing? 

STYLITICS  WANTS  TO  KNOW 

ORGET  TOMORROW.  Stylitics  wants  to  know 
what  you’re  wearing  right  now. 

The  newly  launched  social  networking  site  for 
the  style-savvy  encourages  its  members  to  create 
a  virtual  closet  of  what  they  own,  what  they  are 
wearing  and  what  they  are  buying.  It  then  shares 
the  information  with  retail  buyers,  merchants  and 
product  planners  so  that  the  right  merchandise  appears  in 
store  windows  and  promotions  can  target  hot  items  that 
will  draw  customers  in.  In  exchange  for  sharing  their  infor¬ 
mation,  Stylitics  members  can  communicate  directly  with 
brands  they  buy  and  receive  personalized  style  recommen¬ 
dations,  special  offers  and  other  incentives. 

The  service,  which  launched  its  first  beta  in  August,  in¬ 
tends  to  make  its  fortune  by  selling  access  to  member  data 
as  a  subscription  service.  Using  a  dashboard,  merchants 
can  slice  and  dice  the  data  to  see  what  people  are  wearing 
and  buying  in  real  time,  what  styles  are  trending  up  or  down 
and  what  other  items  are  in  the  closets  of  customers  who 
bought  their  products.  And  as  the  service  builds  a  history, 
subscribers  will  be  able  to  download  and  incorporate  trend¬ 
ing  data  for  input  into  their  own  predictive  analytic  models, 
says  Stylitics  CEO  and  co-founder  Rohan  Deuskar. 

Stylitics  also  gives  consumers  their  own  fashion  intel¬ 
ligence.  “We  give  them  the  ability  to  do  the  same  things  the 
brands  can  do,”  Deuskar  says.  For  example,  they  can  see 
what  people  are  wearing  in  New  York  this  week  and  what 
outfits  they  should  pack  for  a  trip  there.  Success  will  depend 
on  whether  Stylitics  can  get  members  to  keep  a  running  in¬ 
ventory  of  their  closets,  their  purchases  and  what  they  wear 
each  week.  Early  test  results  have  been  good,  Deuskar  says. 
But,  he  acknowledges,  “we  will  have  to  do  a  fantastic  job  to 
keep  them  involved.” 

-  ROBERT  L.  MITCHELL 


spoke  on  the  condition  that  his  name  and  company  (we’ll  call  it 
Company  Z)  not  be  identified.  “Someone  has  to  model  that  based 
on  their  knowledge,  and  that’s  where  the  art  of  merchandis¬ 
ers  comes  into  play,”  the  CIO  says.  “You  still  hear  in  the  buying 
meetings,  we  believe  this  will  happen.  This  is  the  forever  battle  of 
science  versus  art.” 

But  none  of  this  will  work,  he  says,  unless  the  right  systems 
are  in  place  to  supply  the  same  data,  consistently,  to  all  parts  of 
the  business.  At  Company  Z,  that  means  having  a  master  data 
model  and  an  enterprise  service  bus  to  move  the  data  between 
subsystems,  and  to  share  data  across  sales  channels  and  buyer 
silos.  And  final  validation  requires  human  review  and  approval 
across  all  functional  areas,  including  plan  allocation,  production 
sourcing  and  finance,  as  well  as  approval  by  the  merchants.  “At 
the  end  of  the  day,  if  you  don’t  have  good  data  you  use  across  the 
enterprise,  the  results  aren’t  the  same,”  the  CIO  says.  “That’s  very 
important  to  predictive  systems.” 

The  CIO’s  company  isn’t  the  only  retailer  doing  this,  but  it’s 
ahead  of  the  curve,  according  to  IBM’s  Gupta.  “Everyone  says 
they  understand  attributes,  but  how  to  use  them  to  predict 
demand  is  not  something  a  lot  of  companies  do  well.” 

Mining  Social  Intelligence 

To  augment  traditional  analytics,  some  retailers  and  fashion 
designers  have  applied  analytic  techniques  to  social  media  interac¬ 
tions  to  get  real-time  feedback  on  where  fashion  is  going  and  what 
consumers  think  of  their  upcoming  designs. 

Social  analytics  are  changing  the  game  in  retail,  says  Doug 
Stephens,  president  of  research  consultancy  Retail  Prophet. 
“We’re  moving  from  an  outside-in  approach,  to  a  world  where 
inventory  and  demand  planning  and  product  development  will 
all  be  driven  by  social  media,”  he  says. 

At  one  large  retailer  that  creates  its  own  fashions,  designers 
use  the  feedback  in  an  iterative  loop  to  evolve  fashion  items, 
tuning  each  for  the  most  enthusiastic  consumer  response,  ac¬ 
cording  to  an  IT  executive  who  spoke  anonymously. 

First  Insight  offers  a  service  that  tests  how  consumers  will  react 
to  new  fashions  by  engaging  them  in  activities,  such  as  playing 
games  at  social  media  sites.  “The  application  can  be  used  for  high- 
fashion  items  where  there  is  very  little  history,”  says  Greg  Petro, 
the  company’s  CEO.  First  Insight  asks  users  what  they  think  others 
would  pay  for  test  products  and  gauges  their  general  sentiment 
about  them.  What  makes  the  results  different  from  a  focus  group  is 
that  First  Insight  determines  the  “predictive  relevancy”  of  partici¬ 
pants’  responses  by  seeding  the  exercise  with  products  with  known 
outcomes.  It  examines  how  their  predictions  match  up  with  what 
actually  happened  with  those  items,  assigns  a  weighted  predictive 
value  to  each  user,  and  factors  that  in  when  aggregating  the  results 
to  predict  winners  and  losers  for  the  fashions  on  which  they’re 
building  a  demand  prediction.  Deliverables  include  not  just  which 
products  will  sell,  but  suggested  price  ranges  as  well.  The  applica¬ 
tion  is  particularly  useful  for  predicting  consumer  response  to 
high-fashion  items  that  have  little  or  no  history  to  go  on,  says  Petro. 

Wild  Things  LLC,  a  manufacturer  of  military  and  alpine  clothing 
and  related  gear,  was  one  of  First  Insight’s  first  customers.  CEO  Ed 
Schmults,  who  is  now  on  the  vendor’s  advisory  board,  says  he  first 
used  the  service  to  choose  the  best  style  for  a  corporate  logo  and 
is  using  it  to  gauge  consumer  reactions  to  clothing  styles  that  will 
launch  next  year  under  its  newly  licensed  Smith  &  Wesson  brand. 
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Wild  Things  CEO  Ed  Schmults  says  predictive  analytics 
can  reduce  risk  in  fashion  merchandising. 


“Our  consumer  lines  are  absolutely  driven  by  fashion.  We  want  to 
understand  customer  receptivity  to  the  product,  the  color,  the  price 
point,”  he  says.  “This  is  a  very  powerful  tool  for  moderating  that  risk.” 

Elie  Tahari  looked  at  First  Insight’s  technology,  and  while 
Aytaman  says  it  was  technically  “pretty  accurate,”  it  went 
nowhere  with  store  buyers.  “Although  they  liked  the  idea,  they 
didn’t  trust  it,”  he  says. 

Gilt  Groupe,  which  offers  members-only  flash  sales  of  high-fashion 
items  online,  uses  a  combination  of  traditional  analytic  tools  from 
SAS  and  collective  intelligence  from  a  startup  company  to  predict 
which  styles  or  brands  will  be  winners.  Stylitics,  a  social  networking 
site  launched  this  summer,  uses  a  methodology  similar  to  that  of 
First  Insight,  but  it  focuses  on  the  consumer’s  intentions  and  what 
they  already  have  purchased  rather  than  on  how  they  think  others 
would  react  to  a  fashion  or  product  line,  says  Tamara  Gruzbarg, 
senior  director  of  analytics  and  research  at  Gilt  (see  story,  page  25). 

Four  years  ago,  Gilt  knew  exactly  what  its  customers’  tastes 
and  brand  preferences  were.  Today,  customers  are  less  brand- 
oriented,  so  Gilt  relies  on  predictive  analytics  to  help  buyers 
understand  what  will  sell.  But,  Gruzbarg  cautions,  you  have  to 
know  what  you’re  looking  for.  “The  analytic  tools  are  only  as 
good  as  the  data  on  which  you’re  elaborating.  Understanding 
what  the  most  relevant  information  is,  that’s  critical,”  she  says. 

Manya  Mayes,  director  of  predictive  analytics  at  Attensity,  says 


text  analytics  are  being  used  on  data  provided  from  social  media 
sites  such  as  Storify,  which  lets  online  users  create  their  own 
visual  stories  about  what  outfits  they  like.  “The  analytics  identify 
which  clothing  combinations  are  put  together  most  often  and 
which  ones  they  are  keeping,”  she  says. 

Merchants  are  also  mining  “fashion  haul”  videos,  in  which 
teens  show  off  goods  they  bought  at  the  mall  and  voice  strong 
opinions  about  them.  Some  fashion  haul  posts  have  gone  viral, 
with  as  many  as  1  million  hits  in  the  first  week,  says  Jill  Puleri, 
vice  president  of  global  retail  at  IBM,  citing  videos  by  young 
women  named  Blair  Fowler,  Ellie  and  Fiona.  “That’s  something 
you  can  input  into  your  trending  models,”  she  says. 

Predictive  analytics  reduces  the  overall  risk  on  fashion  selec¬ 
tions,  allowing  the  business  to  take  some  chances,  says  Schmults. 
“The  art  is  introducing  things  that  consumers  wouldn’t  have 
thought  about  before,”  he  says. 

Crowdcast  offers  a  different  spin  on  collective  intelligence.  Its 
service  lets  employees  within  an  organization,  such  as  buyers, 
store  managers  or  employees,  bet  virtual  money  on  which 
products  will  be  winners.  “The  collective  wisdom  of  several 
merchants  is  usually  better  than  the  single  estimation  of  one,” 
says  Greg  Girard,  an  analyst  at  IDC.  In  the  Crowdcast  model, 
participants  win  more  money  when  they’re  right,  allowing  them 
to  place  bigger  bets,  which  gives  them  greater  weight  when  all 
bets  are  tallied.  In  this  way,  he  says,  a  group  of  buyers  can  all 
bet  on  this  season’s  line  of  clothing.  So  far,  most  users  have  been 
manufacturers,  which  use  the  tool  to  predict  when  products  will 
ship  or  how  well  they  will  sell,  but  Crowdcast  is  pitching  it  to 
fashion  retailers.  “When  you  have  very  little  data  to  make  big  de¬ 
cisions,  that’s  where  you  can  benefit  from  collective  intelligence 
expertise,”  says  Mat  Fogarty,  the  company’s  founder  and  CEO. 

Timing  is  another  challenge.  It’s  not  enough  to  know  that  a 
fashion  item  keys  into  a  popular  trend,  says  Company  Z’s  CIO.  Re¬ 
tailers  need  to  know  when  those  trends  will  hit.  Company  Z  uses 
crowd-sourcing  and  collective  intelligence  tools  similar  to  what 
First  Insight  and  Crowdcast  offer.  But  it  also  does  test  marketing 
in  stores  and  through  its  e-commerce  channel  and  then  feeds  the 
results  into  its  data  warehouse,  where  it’s  used  as  additional  input 
for  its  predictive  modeling  engine.  “Predictive  analytics  doesn’t 
change  the  way  we  run  our  business,”  the  CIO  says.  “All  it  does  is 
streamline  the  processes  so  we’re  more  analytical.” 

Pulling  It  Together 

The  impressions  and  insights  from  social  media  analytics  can  be 
fed  into  traditional  predictive  analytic  engine  models,  provid¬ 
ing  another  input  to  help  determine  fashion  winners,  says  IBM’s 
Linsky.  First  Insight’s  data  can  fit  within  predictive  analytic  data 
models,  says  Petro.  “It’s  just  a  matter  of  mapping  it,”  he  explains. 

Going  forward,  social  analytics  will  reshape  the  merchan¬ 
diser’s  job  into  “social  merchants,”  says  Girard.  But  for  now,  using 
analytics  —  social  or  otherwise  —  to  pick  fashion  winners  is  still 
a  “missionary  market,”  with  many  retailers  still  on  the  sidelines, 
merchants  and  designers  not  completely  sold  on  the  idea,  and 
everyone  waiting  for  the  first  big  success  story. 

As  for  cultural  resistance,  Petro  thinks  the  technology  will 
gradually  win  over  merchants  as  they  see  the  results  and  under¬ 
stand  where  the  tools  fit.  Predictive  analytics  is  no  substitute  for 
human  judgment,  he  says:  “It’s  an  instrument  in  the  cockpit,  hot 
a  replacement  for  the  pilots  themselves.”  ♦ 
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Wanted: 

BIStars 

Demand  for  tech  workers  with  that 
rare  blend  of  analytics  and  business 
skills  is  on  the  rise.  How  companies 
are  coping  with  the  talent  shortage. 
BY  MARY  K.  PRATT 


CENTERSTONE  Research 
Institute  built  a  team 
of  business  intelligence 
specialists  for  its  four-year- 
old  analytics  division  by 
hiring  some  new  talent 
and  bringing  in  some  of 
its  own  IT  and  business  workers  and 
training  them  in  the  social  sciences 
or  technical  skills  they  lacked. 

But  Russell  Galyon,  CRI’s  director 
of  analytics,  says  he’s  now  finding  it 
tougher  to  expand  the  eight-person 
unit.  Galyon  says  he  can’t  find 
the  unique  combination  of  skills 
he  needs  in  CRI’s  existing  pool  of 
employees,  and  he  can’t  easily  find 
that  talent  in  the  open  labor  market, 
either.  Even  a  headhunter  he  hired 
to  help  with  the  search  has  found 
the  task  challenging. 

“We  get  people  who  meet  the  tech 
qualifications,  they  have  program¬ 
ming  skills,  but  they  don’t  have  the 
skills  to  go  into  a  meeting  with  a  busi¬ 
ness  owner  and  take  abstract  ideas 
and  make  them  understandable,”  he 
says.  “And  that’s  hard  to  train  for.” 

Galyon  isn’t  the  only  one  having 
trouble  filling  BI  positions. 

In  a  recent  Computerworld  reader 
poll,  46%  of  the  52  respondents  said 
they  are  either  currently  hiring  BI 
specialists  or  plan  to  do  so  in  the  next 
12  months.  Of  those  who  are  hiring, 
71%  said  they  feel  that  finding  and 
recruiting  BI  specialists  is  either  somewhat  difficult  or  very  difficult. 
Don’t  expect  it  to  get  easier  anytime  soon. 

McKinsey  Global  Institute’s  May  2011  “Big  Data”  report  says 
that  by  2018,  demand  for  people  with  deep  analytical  talent 
could  be  50%  to  60%  greater  than  the  supply  in  the  U.S. 

The  hiring  challenge  stems  from  the  basic  rule  of  supply  and 
demand:  Companies  are  creating  more  positions  than  there  are 
qualified  workers.  But  the  roots  of  that  equation  are  deep,  and 
relate  to  the  evolution  of  business  intelligence  software  and  the 
organizational  use  of  data. 

As  organizations  become  increasingly  sophisticated  in  the  way 
they  use  the  vast  volumes  of  data  they  collect,  they’re  finding 
that  they  need  professionals  with  unique  skills  who  know  how 
to  handle  it.  But  these  professionals  aren’t  strictly  IT  folks,  nor 
can  they  be  business  specialists  who  don’t  have  deep  technical 
acumen.  Rather,  this  is  an  emerging  hybrid  position  that  requires 
someone  who  can  manage  data,  handle  software,  ask  the  right 
business  questions  and  present  results. 

“You’re  combining  technical,  functional  and  business  acumen. 
It  is  a  unique  breed,  and  there  aren’t  a  lot  of  them  out  there,” 
says  Stacy  Blanchard,  who  leads  the  organization  effectiveness 
services  and  human  capital  unit  at  Accenture  Analytics. 

Continued  on  page  30 
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Continued  from  page  28 

But  companies  must  find 
people  with  these  skills  or  train 
them  if  they  want  to  compete 
in  the  future,  Blanchard  says. 

According  to  a  2010  Ac¬ 
centure  report  called  “Getting 
Serious  about  Analytics:  Better 
Insights,  Better  Outcomes,”  a 
growing  number  of  companies 
are  developing  advanced  ana¬ 
lytic  capabilities  to  gain  a  com¬ 
petitive  advantage.  Those  com¬ 
panies  realize  that  analytics  is 
more  than  just  collecting  and 
storing  data,  and  it’s  more  than 
just  deploying  BI  technologies. 

It’s  about  embedding  analytics 
into  their  decision-making  and 
strategic  processes  and  using 
data  to  drive  decisions. 

Not  surprisingly,  Blanchard 
says  demand  for  BI  specialists  in¬ 
creases  as  the  use  of  BI  matures 
at  those  companies  —  and  as 
others  inch  toward  that  model. 

Where  Does  BI  Sit? 

But  just  as  the  maturity  of 
BI  deployment  varies  from 
company  to  company,  so  does 
the  way  companies  deploy 
BI  specialists,  Blanchard  and 
other  industry  observers  say. 

David  Menninger,  an  analyst 
at  Ventana  Research,  says  his 
firm  has  found  that  BI  responsi¬ 
bilities  sit  in  one  of  three  places: 
in  business  units,  in  the  IT  shop  or  in  an  IT  operation  within  a  busi¬ 
ness  unit,  with  the  best  scenario  for  any  company  being  one  that 
allows  IT  and  business  people  to  work  collaboratively. 

“When  you  can  establish  that  relationship  between  IT  and  the 
lines  of  business,  that  produces  the  best  results,”  Menninger  says, 
noting  that  there  are  two  functions  —  management  of  informa¬ 
tion  and  analysis  of  it  —  rolled  into  business  intelligence. 

“I  don’t  think  you  can  do  that  in  one  function.  You  need  two 
resources  to  do  those  tasks,”  he  adds,  which  is  why  IT  depart¬ 
ments  working  with  business  divisions  is  crucial  if  companies 
want  to  get  significant  value  from  their  BI  investments. 

In  fact,  his  research  found  that  “innovative  companies  are  twice 
as  likely  to  use  their  IT  department  to  meet  business  requests  and 
three  times  less  likely  to  ‘outsource’  [that  is,  rely  on  off-the-shelf  ana¬ 
lytics  or  outside  consultants]  compared  to  tactical  organizations.” 

“A  good  line-of-business  manager  will  understand  the  type  of 
analyses  they  want  to  perform  and  will  look  to  IT  to  accomplish 
those  things.  A  good  IT  manager  or  CIO  will  focus  on  the  tech¬ 
nologies  that  will  enable  their  business  lines  to  do  those  things 
and  will  take  those  concepts  to  the  business  functions,”  he  says. 
“The  idea  is  you’ve  got  to  get  those  two  organizations  working 


together.  They  both  have  a  role 
to  play.  In  an  effective  organi¬ 
zation,  once  a  technology  or 
application  has  been  selected 
or  created,  IT  is  responsible  for 
making  processes  efficient.” 

Like  others,  Menninger  says 
these  responsibilities  require 
highly  skilled  workers  who  can 
work  between  business  and  IT, 
but  he  adds  that  many  compa¬ 
nies  are  having  trouble  locat¬ 
ing  such  people  —  whether 
they  want  to  use  existing 
employees  or  hire  new  ones. 

“Everyone  is  competing  for 
a  scarce  set  of  resources,  so 
the  best  option  is  to  train,”  he 
says,  noting  that  IT  profession¬ 
als  could  learn  more  ana¬ 
lytical,  business  and  statistical 
skills  and  business  people 
could  learn  about  data  man¬ 
agement  and  programming. 

Some  organizations  are 
successfully  finding  ways 
around  any  BI  labor  shortage. 

Carl  Ganter,  managing 
director  of  Circle  of  Blue, 
an  international  network  of 
journalists,  scholars  and  citi¬ 
zens  focused  on  water-related 
issues,  says  BI  tools  have  been 
critical  to  the  organization’s 
work.  He  says  people  in  all 
divisions  at  Circle  of  Blue 
have  received  training  in  busi¬ 
ness  intelligence  and  on  the 
QlikView  BI  technologies  the  organization  uses. 

“There  is  a  learning  curve,  but  we’re  a  very  nimble,  innovative 
group.  So  we  start  by  asking  what  do  we  want  to  know  and  we 
backtrack  and  figure  out  how  to  get  that.  Then  we  rely  on  partners, 
staff  and  vendors  to  do  it,”  he  says.  “Nimble  organizations  can  do 
that,  even  if  they’re  larger,  but  siloed  organizations  can’t.” 

Most,  however,  haven’t  been  as  successful  in  training  or 
recruiting  staff. 

Brian  Veara,  manager  of  decision  resources  at  ThedaCare,  a 
community  health  system  based  in  Appleton,  Wis.,  says  he  needs  a 
balance  of  technical  expertise,  business  knowledge  and  analytical 
acumen  within  his  staff  of  26.  “Hiring  people  with  all  three  skills 
is  difficult,”  he  says.  “It  is  a  set  of  skills  that’s  in  short  supply,  and  it 
has  to  be  developed.  You  can’t  just  say,  ‘I  want  a  BI  specialist,  come 
work  for  me.’  Because  of  those  three  buckets,  one  or  two  will  be 
severely  underdeveloped  and  you’ll  have  to  round  out  your  team.” 

Veara  expects  that  to  be  the  case  for  a  while:  “This  is  a  highly 
skilled,  highly  in-demand  position,  and  that  [demand]  will  only 
increase  in  the  future.”  ♦ 

Pratt  is  a  Computerworld  contributing  writer  in  Waltham,  Mass. 
Contact  her  at  marykpratt@verizon.net. 


Building  a  Better 
BI  Specialist 

In  2008,  students  at  the  university  of  Virginia’s  Mdntire 
School  of  Commerce  asked  associate  professor  Barbara 
Haley  Wixom  to  teach  them  SQL.  Recruiters,  they  said, 
wanted  them  to  know  that  database  language. 

So  Wixom,  a  datawarehousing  and  business  intelligence 
specialist,  held  a  special  three-hour  evening  class  that  drew 
about  80  students  willing  to  give  up  an  evening  and  earn 
no  credits  just  to  learn  what  was  becoming  a  hot  skill  that 
would  look  good  on  their  r£sum£s. 

Given  that  demand,  Wixom  says  lessons  in  SOL  and  other 
Bl  skills  became  part  of  the  regular  course  work  the  following 
semester,  as  the  college  started  to  incorporate  a  bigger  focus 
on  analytics  and  B!  technologies  into  its  curriculum. 

Wixom,  co-author  of  a  2010  report  called  “The  State  of 
Business  Intelligence  in  Academia,”  says  more  and  more 
colleges  and  other  institutions  are  developing  academic 
programs  to  teach  these  skills.  The  idea  is  to  prepare  work¬ 
ers  for  companies  that  need  to  maximize  the  value  of  their 
investments  in  business  intelligence. 

Others  active  in  educating  students  include  IBM,  which 
teamed  up  with  Columbia,  DePaul,  Fordham  and  Yale  to  pro¬ 
vide  analytics  training,  and  Accenture,  which  developed  its 
own  Analytics  Academy. 

“Universities  are  trying  to  catch  up  and  produce  the  right 
candidates,  and  there  are  some  leading  schools  who  are  getting 
there,  but  that’s  going  to  take  time  to  develop,”  Wixom  says.  “In 
the  meantime,  the  hiring  is  just  going  to  be  really  difficult.” 

,  -  MARY  K.  PRATT 
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TO  THE  CLOUD 


Agencies  are  now  grappling 
with  the  hard  realities  of 
making  the  'cloud  first'  policy 

work.  BY  MARY  K.  PRATT 
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HE  GOVERNMENT  SECTOR  is  on  a  fast  march 
to  the  cloud,  but  Robert  Rosen  wants  to 
pause  for  a  breath. 

“I’ve  been  looking  at  the  cloud  for  a  long 
time,  and  it’s  not  as  simple  as  all  the  vendors 
want  to  make  it  seem,”  says  Rosen,  CIO  of 
the  National  Institute  of  Arthritis,  Musculo¬ 
skeletal  and  Skin  Diseases  at  the  National 
Institutes  of  Health  in  Bethesda,  Md.  “The 
federal  government  isn’t  this  uniform  user  of  IT.  So  there’s  no  one- 
size-fits-all.  There  are  places  it  fits  fine,  others  where  it  doesn’t,  and 

Continued  on  page  34 
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Bl  &  Analytics  Perspectives  2011 
is  the  premier  conference  for 
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this  great  middle  area  where  it’s  ‘maybe,  maybe  not.’  ” 

So  even  though  he’s  working  under  a  new  federal  mandate 
known  as  “cloud  first,”  Rosen  is  moving  cautiously.  He’s  evaluat¬ 
ing  how  to  use  cloud  computing  to  store  data  that  his  agency 
doesn’t  access  frequently,  a  move  that  could  help  eliminate  the 
need  to  build  a  new  data  center.  But  he  says  he  wants  to  cover  all 
the  bases  to  make  sure  he  doesn’t  make  mistakes.  He’s  looking  at 
the  data  itself  to  determine  security  needs,  calculating  band¬ 
width  requirements  and  devising  an  exit  strategy  in  case  he 
wants  to  switch  vendors  or  move  out  of  the  cloud. 

“It’s  a  deliberate  process  we’re  going  through.  We’re  just  not 
going  to  leap,”  says  Rosen,  a  past  president  of  Share,  an  IBM 
user  group.  Still,  the  pressure  is  on  Rosen  and  his  colleagues  to 
move  to  the  cloud. 


Vivek  Kundra 


Last  December,  former  U.S. 

CIO  Vivek  Kundra  established  the 
cloud-first  policy,  telling  federal  CIOs 
to  move  three  services  to  the  cloud 
within  12  to  18  months.  In  a  25-point 
plan  to  reform  federal  IT  manage¬ 
ment,  Kundra  cited  cost  savings, 
flexibility  and  speed  of  deployment 
as  reasons  for  adopting  the  policy. 

Now,  IT  leaders  like  Rosen  are 
grappling  with  the  details  involved 
in  making  the  policy  work,  but 
also  seeing  early  successes  moving 
some  functions  to  the  cloud  as  they  work  toward  migrating 
truly  strategic  systems  there. 

“This  is  a  paradigm  shift,”  says  Shawn  Kingsberry,  CIO  at  the 
federal  Recovery  Accountability  and  Transparency  Board  and  a 
proponent  of  cloud  computing. 

Kingsberry  considers  this  a  unique  point  in  IT  history,  akin  to 
the  late  1990s,  when  IT  departments  went  through  drastic  upgrades 
during  the  run-up  to  Y2K.  Today,  dwindling  dollars  and  a  shrinking 
workforce  are  forcing  IT  leaders  to  once  again  think  big.  “Now  you 
have  a  perfect  situation  where  the  stars  are  aligned  to  make  massive 
change,”  he  says.  “When  you  look  at  what  this  means,  federal 
government  has  the  opportunity  to  make  moves  forward.” 

Kingsberry ’s  agency  moved  its  Recovery.gov  website  to 
Amazon.com’s  EC2  cloud  service  in  April  2010.  He  says  the 
agency  decided  to  make  the  leap  after  successfully  using 
the  cloud  for  testing,  although  IT  leaders  at  the  agency  still 
performed  a  rigorous  analysis  before  making  the  move.  They 
considered,  among  other  factors,  how  cloud  computing  would 
fare  in  terms  of  performance,  cost  and  security. 

So  far,  the  cloud  has  delivered,  says  Kingsberry.  Using  cloud 
services  saved  about  $750,000  in  the  first  year  for  Recovery.gov, 
a  site  for  sharing  data  and  information  related  to  the  federal 
American  Recovery  and  Reinvestment  Act  of  2009.  Kingsberry 
says  he  expects  more  savings  in  the  future,  since  the  site  will  be 
able  to  scale  up  without  requiring  investments  in  new  hardware. 

“Obviously,  one  of  the  key  drivers  behind  the  federal  govern¬ 
ment  [cloud  initiative]  is  Vivek  Kundra’s  [push]  for  cost-cutting,” 
says  JP  Morgenthal,  cloud  evangelist  at  Smartronix,  a  Holly¬ 
wood,  Md.-based  consultancy  that  helped  the  Recovery  Account¬ 
ability  and  Transparency  Board  move  Recovery.gov  to  the  cloud. 

Continued  on  page  36 


Falling  Behind 
Schedule 

Federal  IT  leaders  are  moving  ahead  with  cloud  computing 
projects,  but  it  appears  that  many  of  them  aren’t  moving  as 
quickly  as  mandated  by  the  “cloud  first”  policy,  which  requires 
CIOs  to  move  one  service  to  the  cloud  by  the  end  of  this  year 
and  two  more  by  mid-2012.  The  “Federal  Cloud  Weather  Report" 
published  in  April  by  MeriTalk,  found  the  following: 


52% 


will  move  the  first  service  to  cloud 
computing  in  the  next  12  months. 


48% 


will  move  the  next  two  services  to  the  cloud 
within  the  18-month  time  frame. 


Faulty  Road  Map? 

The  General  Services  Administration  launched  the  Federal 
Risk  and  Authorization  Management  Program  (FedRAMP) 
last  November  to  “provide  a  standard  approach  to  assessing  and 
authorizing  cloud  computing  services  and  products"  and  to  establish 
security  standards  for  federal  cloud  computing.  But  MeriTalk's 
“Federal  Cloud  Weather  Report”  cites  the  following  challenges: 


64% 


of  167  federal  government  IT  leaders 
surveyed  said  they  understand  FedRAMP 
but  aren’t  optimistic  that  it  will  help. 


56% 


said  it  will  neither  facilitate  nor  accelerate 
federal  cloud  adoption. 


67% 


said  it  won’t  make  federal 
loud  computing  more  secure. 


Glacial  Change 

More  and  more  federal  IT  leaders  are  moving  to  the  cloud, 
according  a  survey  of  46  CIOs  of  major  federal  departments  and 
independent  agencies  that  was  conducted  by  TechAmerica  and 
Grant  Thornton  LLP.  Flowever.  the  May  2011  survey  showed  that 
progress  is  slow: 


57% 

14% 


of  the  respondents  reported  that  an  active 
move  to  cloud  computing  was  under  way  in 
early  2011,  compared  with  54%  in  late  2009. 

said  they  are  undertaking  a  cloud  pilot, 
versus  16%  in  2009. 


None 


of  the  CIOs  reported  that  they  don’t  have 
cloud  plans,  compared  with  8%  in  late  2009. 
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Classified  Data? 
Not  in  the  Cloud 

IT  leaders  are  constantly  weighing  cloud  computing’s 
benefits  against  its  security  risks. 

In  its  spring  survey  of  375  federal,  state  and  local  govern¬ 
ment  IT  decision-makers  and  influencers,  CompTIA  found 
that  44%  of  cloud  implementers  rated  network  security  as 
a  top  challenge.  Thirty-six  percent  listed  compliance  with 
security  mandates  as  a  top  challenge,  while  35%  cited  data 
loss  prevention  and  35%  pointed  to  hardware  security. 

Tim  Herbert,  vice  president  of  research  at  CompTIA,  says 
CIOs  are  concerned  about  keeping  data  and  systems  safe 
from  malicious  attacks  and  establishing  data  governance 
procedures  in  an  environment  that  encourages  collabora¬ 
tion  and  sharing. 

"It  comes  up  a  lot  -  security  and  policies.  And  it  comes 
up  in  the  private  sector,  too,"  he  says.  “Some  of  that  con¬ 
cern  is  reality,  and  some  of  it  is  perception.” 

At  the  very  least,  analysts  say,  those  security  concerns 
will  keep  classified  data  out  of  the  cloud  for  the  time  being 
even  as  the  General  Services  Administration  and  other 
agencies  establish  security  standards.  And  it  will  likely 
limit  to  some  degree  the  amount  of  less-sensitive  data  that 
migrates  to  the  cloud  as  well. 

-  MARY  K.  PRATT 
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Big  Bucks  on  the  Line 

The  amount  of  money  at  stake  is  significant.  In  its  “Federal  Cloud 
Weather  Report,”  released  in  April,  MeriTalk,  a  social  network 
for  government  IT  professionals,  found  that  cloud  implementa¬ 
tions  could  produce  $14.4  billion  in  savings  in  the  first  year. 

The  report,  which  was  underwritten  by  virtualization  vendor 
VMware,  also  noted  that  64%  of  167  federal  CIOs  and  IT  manag¬ 
ers  surveyed  in  January  expect  cloud  computing  to  both  reduce 
costs  and  improve  service. 

In  his  Feb.  8,  2011,  “Federal  Cloud  Computing  Strategy” 
report,  Kundra  listed  other  benefits  beyond  cost  containment.  He 
said  the  cloud  could  create  a  more  agile,  responsive  and  scalable 
infrastructure  that  would  support  more  collaboration  and  in¬ 
novation  —  the  same  factors  that  nongovernment  IT  leaders  cite 
as  reasons  for  moving  to  the  cloud. 

Several  government  projects  have  already  yielded  such  returns. 

The  U.S.  Treasury  Department  moved  its  public-facing  web¬ 
sites,  including  Treasury.gov,  to  Amazon  cloud  services  earlier 
this  year,  with  help  from  Smartronix.  Morgenthal  says  the  move 
enabled  the  site  to  be  more  flexible  and  scalable. 

Analysts  point  to  other  cloud  initiatives  that  are  yielding  cost 
reductions  and  service  improvements. 

“Certainly  the  migration  of  USA.gov  to  a  private  cloud  hosted 
by  Terremark  [now  part  of  Verizon],  as  well  as  the  early  cloud 


development  at  DISA  [the  Defense  Information  Systems  Agency] 
and  at  NASA,  are  great  examples,”  Gartner  analyst  Andrea 
Di  Maio  said  in  an  email. 

DISA’s  development  of  the  Rapid  Access  Computing  Environ¬ 
ment  (RACE)  cloud  infrastructure  is  an  example  of  a  successful 
government  cloud  initiative,  agrees  Deniece  Peterson,  a  federal 
industry  analyst  at  Deltek,  a  Herndon,  Va.-based  enterprise 
software  vendor  whose  customers  include  federal  agencies  and 
government  contractors.  Other  successful  cloud  projects  include 
the  U.S.  Army’s  deployment  of  Salesforce.com  and  the  Customs 
and  Border  Protection  agency’s  use  of  the  cloud  for  its  customer 
relationship  management  application,  she  adds. 

This  spring,  the  Army  announced  that  it  had  completed  the  first 
phase  of  a  migration  of  email  services  to  the  DISA  cloud;  officials 
estimate  that  the  move  will  save  $100  million  annually. 

Hurdles  to  Clear 

Even  though  there  have  been  early  victories  in  the  race  to  the 
cloud,  analysts  and  government  officials  alike  acknowledge  that 
there  are  obstacles  on  the  path  ahead.  Concerns  about  security, 
funding  and  ROI,  as  well  as  political  opposition,  could  impact 
what  moves  to  the  cloud  and  when  it  goes  there.  Meanwhile, 
cultural  resistance  to  change  and  an  institutional  reluctance  to 
share  resources  could  hinder  adoption  of  cloud  computing  even 
when  there  are  strong  business  cases  for  it. 

Indeed,  in  May  the  Army  learned  that  the  House  Emerging 
Threats  and  Capabilities  Subcommittee  cut  its  funding  for  the 
email  cloud  migration  project  from  a  requested  $85.4  million  to 
just  $1.7  million,  with  subcommittee  members  saying  they  want 
to  see  a  cost-benefit  analysis  before  they  will  agree  to  provide 
further  support. 

Peterson  says  that  many  agencies  will  have  to  work  with 
limited  funding,  even  in  cases  where  they  can  demonstrate  clear 
benefits  from  moving  to  the  cloud. 

“Budget  constraints  and  a  lack  of  resources  are  always  in  the 
mix  of  being  top  concerns  or  challenges,”  says  Tim  Herbert,  vice 
president  of  research  at  the  Computing  Technology  Industry  As¬ 
sociation  (CompTIA),  which  has  surveyed  government  IT  leaders 
on  subjects  such  as  cloud  computing.  Other  issues  that  could 
slow  or  halt  the  move  to  the  cloud  include  slow-moving  bureau¬ 
cracies,  fear  of  change,  lack  of  interoperability  between  legacy 
and  cloud-based  systems,  the  challenge  of  coordinating  technolo¬ 
gies  across  agencies,  and  a  lack  of  skilled  personnel,  he  says. 

In  MeriTalk’s  recent  study,  79%  of  the  federal  CIOs  polled 
said  budget  constraints  are  a  top  obstacle  to  implementing  cloud 
computing,  and  71%  said  security  concerns  are  preventing  cloud 
adoption.  Some  of  those  issues  could  also  influence  what  model 
of  cloud  computing  —  private,  public,  community  or  hybrid  — 
federal  agencies  adopt. 

Some  agencies  are  large  enough  to  build  their  own  private 
clouds  and  still  reap  financial  benefits,  Peterson  says.  But  many 
others  are  too  small  to  handle  such  a  move  and  wouldn’t  see 
any  cost  benefits  from  doing  so.  That’s  not  to  say,  however,  that 
there  isn’t  a  potential  for  big  savings  with  private  clouds.  Peterson 
points  out  that  large  agencies  could  build  private  clouds  and  then 
sell  capacity  to  smaller  agencies  under  a  shared-services  model. 

But  for  that  model  to  work  and  produce  a  strong  ROI,  govern¬ 
ment  entities  would  have  to  move  beyond  their  often  parochial 
outlooks  and  build  a  culture  that  embraces  cross-agency  coopera- 
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tion,  say  Peterson  and  other  analysts. 

“If  everyone  builds  their  own  private  cloud,  you  won’t  get  the 
cost  savings,”  Peterson  says.  “The  big  thing  is,  we  don’t  want 
to  see  a  bunch  of  cloud  stovepipes  popping  up.  That’s  how  the 
government  operates  now.” 

Public,  Private  or  Hybrid 

Analysts  say  that  government  agencies,  like  their  private-sector 
counterparts,  are  trying  all  of  the  cloud  options  to  see  which  models 
work  best  in  certain  situations. 

Government  entities  that 
are  implementing  cloud 
computing  are  primarily 
doing  so  in  one  of  three  ways, 
according  to  Marie  Francesca, 
director  of  engineering  opera¬ 
tions,  and  Geoff  Raines,  senior 
principal  software  systems  en¬ 
gineer,  at  The  Mitre  Corp.,  a 
government  contractor  based 
in  Arlington,  Va. 

One  is  to  use  commercial 
services  such  as  those  offered 
by  Amazon  and  Google.  Ex¬ 
amples  include  the  migrations 
of  Treasury.gov  and  Recovery, 
gov  to  Amazon’s  cloud  service. 

The  second  is  to  share  ser¬ 
vices  within  the  government, 
where  one  agency  acts  as  a 
service  provider  for  others.  Ex¬ 
amples  of  this  are  DISA’s  RACE 
system  and  NASA’s  Nebula. 

The  third  option  is  to  build 
a  private  cloud  for  an  organi¬ 
zation’s  exclusive  use. 

Francesca  and  Raines  point 
out  that  government  CIOs 
have  such  diverse  systems 
that  they  can  legitimately 
use  any  of  those  approaches, 
depending  on  the  needs  of  the 
applications  and  data  slated 
for  migration  to  the  cloud. 

The  General  Services 
Administration  and  the  Na¬ 
tional  Institute  of  Standards 
and  Technology  (NIST)  are 
helping  federal  agencies  with 
their  cloud  computing  moves,  according  to  Francesca  and  Raines. 

The  GSA  is  setting  up  contract  vehicles  and  schedules  that  will 
allow  agencies  to  purchase  commercial  cloud  services  in  a  quicker 
and  more  uniform  way,  they  explain.  The  website  Apps.gov  will 
provide  a  central  point  for  information  on  this  initiative.  They 
say  the  GSA  had  already  been  providing  federal  agencies  with  a 
uniform  mechanism  for  handling  other  types  of  contractors. 

Meanwhile,  NIST  is  defining  cloud  concepts,  identifying  stan¬ 
dards  and  organizing  security  research. 

Despite  such  guidance,  the  reality  is  that  many  federal  entities 


aren’t  yet  moving  to  the  cloud. 

According  to  MeriTalk’s  report,  79%  of  federal  CIOs  said  their 
agencies  aren’t  adopting  the  cloud-first  policy,  and  only  64%  are 
planning  to  embrace  that  approach  in  the  next  two  years. 

Moreover,  at  the  time  of  the  survey,  only  17%  of  the  federal 
CIOs  were  using  infrastructure  as  a  service,  while  15%  were  using 
software  as  a  service  and  13%  were  using  platform  as  a  service. 
However,  20%  said  they  were  planning  to  move  to  infrastruc¬ 
ture  as  a  service,  22%  were  planning  to  start  using  software  as  a 

service,  and  19%  said  they  had 
a  platform-as-a-service  project 
in  the  works. 

Support  for  the  initia¬ 
tive  continues  even  though 
Kundra  left  his  CIO  post  in 
August  to  take  a  fellowship  at 
Harvard  University. 

“Vivek  is  the  visionary 
guy,  but  the  next  step  now 
is  really  around  policy  and 
governance,”  says  Morgen- 
thal.  “These  are  less  visionary 
and  more  detail-oriented,  so 
in  certain  regards,  it’s  good 
timing,  so  whoever  comes  in 
next  can  be  more  structured 
and  eliminate  those  hurdles.” 

Kingsberry  says  he  thinks 
the  government  should  act 
faster.  “Federal  still  doesn’t 
move  at  the  pace  that  it 
can.  There’s  risk  aversion 
throughout  it.  And  because 
of  that,  there  isn’t  going  to  be 
this  massive  move,”  he  says. 
“But  this  is  a  journey,  and 
there  are  steps.  There  will  be 
stop  points,  and  right  now 
this  is  one  of  the  stop  points. 
The  next  step  is  for  federal 
as  a  whole  to  embrace  and 
understand  the  performance 
characteristics  for  actually 
making  this  move.” 

But  Rosen  says  the  move 
to  cloud  computing  shouldn’t 
be  thought  of  as  a  race.  “My 
approach  is,  let’s  start  with 
something  simple,  something 
we  can  encapsulate,  and  start  with  that  and  then  move  that  into  the 
cloud,”  he  says,  noting  that  IT  grew  wary  of  megaprojects  for  a  good 
reason  —  in  the  past,  they  often  led  to  big  failures.  “I’m  trying  to  do 
[cloud  computing]  in  ways  so  we  don’t  make  mistakes  and  waste  a 
lot  of  money,  and  if  we  find  it  doesn’t  work,  we  can  back  out.” 

Perhaps,  then,  despite  all  of  the  hype  around  the  benefits  of 
cloud  computing,  the  migration  of  federal  IT  to  the  cloud  won’t 
be  an  all-out  sprint  so  much  as  a  well-paced  marathon.  ♦ 

Pratt  is  a  Computerworld  contributing  writer  in  Waltham,  Mass. 
Contact  her  at  marykpratt@verizon.net. 
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Security 
T  Manager's  -i 

Journal 

^  MATHIAS  THURMAN 

Assessing  the  Company’s  Apps 

A  third  party  peers  at  the  internet-facing  applications  and 
finds  several  problems  that  need  to  be  addressed. 


WHEN  YOU’RE  in  charge 
of  a  company’s  security, 
you  have  to  actively  seek 
out  its  weaknesses  and 
then  determine  how  to 
shore  them  up.  That’s  what  I’ve  been  up 
to  lately,  as  an  offshoot  of  my  efforts  to 
harden  the  DMZ. 

Globally,  we  have  about  40  servers  in 
our  DMZ.  I’m  fairly  confident  that  they 
are  locked  down,  patched  and  protected 
with  anti-malware  software.  I’m  also 
fairly  confident  that  the  DMZ  firewalls 
are  properly  configured  to 
minimize  our  exposure. 

What  I  am  not  confident 
about  is  the  security  of  the 
applications  residing  on 
those  servers.  We  have  too 
many  Internet-facing  apps  that  haven’t 
been  properly  vetted  by  me  and  my  team. 
Part  of  the  problem  is  that  during  the 
past  couple  of  years,  our  company  has 
made  several  major  acquisitions  without 
conducting  security  due  diligence. 

Prodding  me  to  action  was  the  recent 
rash  of  hacks,  most  of  them  owing  their 
success  to  poorly  architected  Web-based 
applications.  Each  quarter,  I  have  a 
budget  line  for  “penetration  and  vulner¬ 
ability  assessments.”  Because  our  physical 


security  program  is  extremely  weak.  I’ve 
been  spending  that  money  on  physical 
penetration  testing.  But  that  has  become 
an  exercise  in  paying  someone  to  tell  me 
things  I  already  know.  For  example,  I 
didn’t  really  need  to  spend  $20,000  for  a 
consultant  to  tell  me  that  he  could  create 
a  fake  company  badge  and  piggyback 
behind  someone  else  to  gain  access  to 
our  facilities.  So  this  quarter,  I  decided  to 
spend  the  money  on  a  third-party  assess¬ 
ment  of  our  Internet-facing  applications. 

Right  off,  the  consultant  found  that  an 
e-commerce  application 
would  allow  a  customer 
to  obtain  software 
without  paying  for  it 
just  by  modifying  a 
URL.  Since  the  problem 
is  so  similar  to  one  I  myself  warned  about 
in  my  recent  article  about  enterprise 
search,  it  was  very  embarrassing. 

The  assessment  also  revealed  that  in 
another  of  our  Web-based  applications, 
someone  could  intercept  and  then  ma¬ 
nipulate  password-reset  traffic  to  change 
a  customer’s  password.  Ouch! 

Yet  another  application  runs  on  top  of 
a  popular  social  collaboration  platform, 
allowing  users  to  share  documents.  The 
environment  is  open,  meaning  anyone 


Trouble 

Ticket 


vulnerability 
assessment  uncovers 
several  potential  problems. 


Recommend  fixes 
and  keep  an  eye  on  things 
to  make  sure  they’re  taken 
care  of. 


can  join  and  share  information  or 
download  our  product  documents.  The 
ugly  discovery  was  that  anyone  could 
download  a  document,  make  changes 
to  it  and  then  upload  it  back  to  the  same 
location  with  the  same  name.  This  could 
prove  disastrous  if  changes  were  made 
to  our  products’  specs.  Fortunately, 
this  issue  was  remedied  with  a  simple 
configuration  change  —  but  again,  it  was 
embarrassing. 

Another  problem  was  found  in  an 
application  that  has  been  capturing 
customer  information  without  SSL  en¬ 
cryption.  We’ve  been  doing  a  good  job  of 
encrypting  the  initial  log-on  page,  but  the 
rest  of  the  application  wasn’t  encrypted. 

There  was  good  news  as  well.  Our  ap¬ 
plications  didn’t  seem  to  be  susceptible  to 
SQL  injection,  which  has  been  a  factor  in 
many  recent  attacks. 

On  the  other  hand,  we  were  suscepti¬ 
ble  to  many  variations  of  cross-site  script¬ 
ing,  another  popular  method  of  attacking 
companies. 

I’ll  be  presenting  the  results  of  this 
assessment  to  the  various  application 
groups.  After  that,  I’ll  strip  out  the  good 
stuff  and  prepare  a  remediation  tracking 
spreadsheet  that  describes  each  issue 
(with  reference  to  the  appropriate  section 
of  the  comprehensive  assessment  report) 
and  lists  remediation  recommendations, 
due  dates  and  the  person  responsible  for 
eliminating  the  problem.  The  spreadsheet 
will  make  it  easy  for  me  to  tell  at  a  glance 
the  status  of  each  issue. 

And,  of  course.  I’ll  be  briefing  our 
application  team  to  ensure  that  we  don’t 
make  the  same  mistakes  as  we  develop  or 
acquire  other  applications.  ♦ 

This  week’s  journal  is  written  by  a  real 
security  manager,  “Mathias  Thurman,” 
whose  name  and  employer  have  been  disguised 
for  obvious  reasons.  Contact  him  at  mathias_ 
thurman@yahoo.com. 


We  have  too  many  Internet-facing  apps  that  haven’t  been 
properly  vetted  by  me  and  my  team. 


the  discussions  about 
security!  computerworld.com/ 
blogs/security 
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CALL 

FOR 

ENTRIES 


Ones 


to  Watc  h 

AWARDS  2012 


We’re  looking  for  the  next  generation  of  standout  IT  leaders.  The 
CIO  Ones  to  Watch  Award  honors  the  rising  stars  in  IT— the  senior  staff 
destined  to  become  the  CIOs  of  the  future— as  identified  and  sponsored 
by  the  CIOs  of  today’s  leading  organizations. 


Apply 


CIO  magazine  and  the  CIO  Executive  Council’s  annual  Ones  to  Watch 
award  identifies  the  rising  stars  in  IT.  To  be  honored,  these  future  CIOs 
must  have  demonstrated  leadership,  driven  innovation  and  delivered 
value  to  their  business;  in  short,  they  will  soon  be  able  to  head  up  their 
own  IT  organization.  The  awards  are  judged  by  a  panel  of  veteran  CIOs 
experienced  in  leadership  development,  and  their  feedback  will  be 
available  to  all  nominees. 

Apply  today  at:  cio.com/otw 


Be  Seen 


Winners  will  be  honored  during  the 
CIO  Leadership  Event  April  29-May  1,  2012, 
in  Marco  Island,  FL,  and  be  featured  in  the  May 
issue  of  CIO  magazine  and  online  at  cio.com 


Produced  and  presented  by 


BUSINESS  TECHNOLOGY  LEADERSHIP 


Don’t  Be  Late 


Nominations  accepted  through  October  31. 

For  more  information  about  this  and  other 
prestigious  programs  visit:  cio.com/cio-awards 


and 


CIO 


CIO  Executive  Council 


Leaders  Shaping  the  Future  of  Business 


—  OPINION 


PAUL  GUN 


Collaboration’s  Fragility 


Collaboration 
is  a  fragile 
thing,  difficult 
to  create,  and 
easy  to  break. 


Paul  Glen  is  the 

CEO  of  Leading 
Geeks,  an  education 
and  consulting  firm 
devoted  to  unlocking 
the  value  of  technical 
people.  You  can 
contact  him  at  info® 
leadinggeeks.com. 


E  ALL  KNOW  that  collaborating  with  other  departments  is  hard. 
We  all  have  visceral  memories  of  failed  projects,  outrageous 
behavior  and  painful  betrayals.  When  my  colleagues  talk  about 
these  experiences,  I  can  see  the  sadness  and  anger  in  their  eyes. 


Even  decades  later,  the  wounds  remain  raw,  the 
lessons  learned  fresh,  and  the  resentments  intact. 

But  most  of  us  have  had  great  cross-functional 
collaborations  as  well.  Ask  about  those  magical 
projects  when  everyone  pulled  in  one  direction, 
unified,  synchronized  and  coordinated,  and  eyes 
twinkle  with  excitement.  When  groups  face  tough 
problems  and  overcome  them  together,  the  warm 
feelings  last  a  lifetime. 

Clearly,  we  all  want  every  collaborative  effort  to 
be  one  of  those  ideal  experiences,  but  we  get  the 
disasters  much  more  often.  This  isn’t  too  surpris¬ 
ing,  really.  Everything  has  to  go  right  to  make 
a  collaboration  work  well,  but  only  one  or  two 
things  need  to  go  wrong  to  undermine  that  co¬ 
operative  ecstasy.  Collaboration  is  a  fragile  thing, 
difficult  to  create,  and  easy  to  break. 

So  what  stands  in  the  way  of  building  more 
good  experiences?  Many  of  the  obstacles  are  well 
known,  but  others  are  much  more  subtle.  I  tend  to 
think  of  them  in  categories. 

Structural  obstacles  are  rooted  in  organiza¬ 
tional  configuration  and  geography.  It’s  hard  to 
work  with  people  you’ve  never  met  or  who  work 
when  you  sleep,  speak  a  different  native  language 
or  have  unfamiliar  cultural  assumptions.  It’s  also 
hard  to  build  consensus  across  organizational 
boundaries.  Interests  and  incentives  often  con¬ 
flict.  Sometimes,  people  are  parochial  and  fight 
for  whatever  benefits  themselves  or  their  group, 
or  they  conflate  the  interests  of  their  group  with 
those  of  the  organization  at  large. 

Legal  obstacles  arise  out  of  rote  enforcement  of 


rules,  be  they  contractual,  procedural  or  regulatory. 
Unfeeling,  mechanical  enforcement  of  rules  often 
undermines  the  trust  required  for  collaboration,  es¬ 
pecially  when  people  use  regulations  as  substitutes 
for  relationships.  Rules  are  sometimes  specifically 
designed  to  minimize  collaboration,  imposing 
checks  and  balances  on  negative  behaviors  that  can 
result  from  collusion.  And  sometimes  processes 
that  are  designed  to  balance  competing  interests 
reinforce  antagonism  unnecessarily  in  practice. 

Technical  obstacles  are  imposed  by  the  tools 
we  use.  Each  technology  embodies  a  view  of  the 
world  embedded  in  the  designer’s  vision.  To  use 
the  tool  effectively,  we  need  to  understand  and 
adopt  that  view.  When  the  way  a  tool  is  used 
comes  into  conflict  with  the  way  businesses  run, 
we  also  come  into  conflict. 

Social  obstacles  are  the  most  pervasive  and 
difficult  to  deal  with.  They  are  rooted  in  the 
human  experience  of  group  life,  of  the  differ¬ 
ences  between  organizational,  departmental  and 
national  cultures.  It’s  easy  to  see  that  language 
is  a  barrier  to  communication.  But  more  subtle 
obstacles  are  at  play  as  well.  Each  subgroup  devel¬ 
ops  patterns  of  thinking  and  behaving  that  make 
them  successful  in  the  work  they  do.  For  example, 
technical  people  often  view  everything  as  either  a 
problem  or  a  solution.  If  groups’  habits  of  thought 
are  incompatible,  collaboration  is  undermined. 

Clearly,  it  is  possible  to  build  outstanding  cross¬ 
functional  teams.  Just  remember  that  you  are  build¬ 
ing  something  that’s  very  fragile  and  expands  slowly. 

In  short,  to  create  collaboration,  don’t  kill  it.  ♦ 
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MARKETPLACE 


Desktop  with  Spider 
Network  with  Spider 
Publish  (portable  media) 
Web  with  Spider 
Engine  for  Win  &  .NET 
Engine  for  Linux 


Ask  about 

fully-functional 

evaluations! 


dtSearcK 


The  Smart  Choice  for 
Text  Retrieval®  since  1991 


Instantly  Search  Terabytes  of  Text 


‘  “  "  *  ““  s. 

Highlights  hits  in  a  wide  range  of  data,  using  dtSearch's 

own  file  parsers  and  converters 

•  Supports  MS  Office  through  2010  (Word,  Excel,  PowerPoint, 
Access),  OpenOffice,  ZIP,  HTML,  XML/XSL,  PDF  and  more 


With  dtSearch:  "Endless 
indexing  is  now  a  breeze" 
Computerworld 


•  Supports  Exchange,  Outlook,  Thunderbird  and  other 
popular  email  types,  including  nested  and  ZIP  attachments 

•  Spider  supports  static  and  dynamic  web  data  like  ASP.NET, 
MS  SharePoint,  CMS,  PHP,  etc. 

•  API  for  SQL-type  data,  including  BLOB  data 

25+  full-text  and  fielded  data  search  options 

•  Federated  searching 

•  Special  forensics  search  options 

•  Advanced  data  classification  objects 

APIs  for  C++,  Java  and  .NET  through  4.x 

•  Native  64-bit  and  32-bit  Win  /  Linux  APIs;  .NET  Spider  API 

•  Content  extraction  only  licenses  available 

V . .  . .  . . J 


"Impressive  searching 
power ...  handles  more 
than  a  terabyte  of  text  in 
a  single  index" 

Network  World 


"Lightning  fast ... 
performance  was 
unmatched  by  any  other 
product" 

Redmond  Magazine 


For  hundreds  more 
reviews  and  developer 
case  studies,  see 
www.dtSearch.com 


] 


www.dtSearch.com  •  i-soo-it-finds 

v_ _ _ _ I. . .  . J 


Make  the  Most  Out  of  Your  Advertising  Budget. 
Reach  Computerworld’s  Targeted  Audience. 

94%  of  those  surveyed  said  they  take  one  or  more  actions  as  a  result  of  seeing  an  advertisement, 

with  75%  visiting  an  advertiser’s  website.* 


The  Marketplace  section  of 


COMPUTERWORLD 


Source:  'Harvey  Ad  Measurement  Study, 
Computerworld  May  10, 2010 


Contact  Enku  Gubaie  for  more  details. 
508.766.5487 

egubaie@idgenterprise.com 


COMPUTERWORLD.COM 


Joseph  Eng 

The  CIO  at  JetBlue 
Airways  answers  questions 
about  what  to  include  on  a 
resume,  the  qualities  that  matter  most  in 
employees,  and  more. 


ASK  A  PREMIER  100  IT  LEADER 


I  have  been  reworking  my  resume 
and  think  it’s  too  long,  but  I  hate  to 
cut  out  any  of  my  experience.  I  have 
been  in  the  IT  industry  for  over  30 
years.  What  approach  should  I  take? 
While  you  don't  want  to  sell  yourself 
short  in  terms  of  your  accomplishments 
and  experiences,  take  your  audience 
into  consideration.  Who  are  they?  What 
are  they  looking  for?  Which  of  your 
accomplishments  most 
distinguish  you  from  oth¬ 
ers?  Will  hiring  managers 
understand  what  you're 
saying?  Will  they  even  be 
interested  in  what  you’re 
saying?  In  other  words, 
rather  than  focusing  on 
the  overall  length,  make 
sure  that  what  you  say 
presents  you  in  a  way  that  your  audi¬ 
ence  will  understand  and  appreciate. 

As  a  manager,  what  are  the  quali¬ 
ties  you  value  most  in  your  employ 
ees?  I’m  not  necessarily  talking 
about  tech  skills.  While  great  tech 
skills  are  important  and  sometimes 
even  a  rare  commodity,  l  also  value 
people  who  can  bring  their  tech  skills 
and  work  well  in  a  team  environment, 
have  an  interest  in.  and  even  a  thirst 


for,  the  business,  and  have  the  tenac-  ■ 
ity  to  deliver  and  be  accountable  to 
achieve  results.  There  are  very  few 
circumstances  when  an  individual  can 
get  a  job  done  alone.  The  problems 
we  need  to  solve  and  the  opportuni¬ 
ties  we  need  to  address  as  technology 
professionals  require  us  to  collaborate. 
And  we  collaborate  with  a  purpose  in 
solving  something  to  move  a  business 
forward.  Something 
else  to  think  about:  Too 
often,  IT  is  known  for 
never-ending  projects. 
IT  professionals  and 
teams  that  are  known 
to  get  the  job  done  will 
garner  the  praises  of 
the  business. 

In  the  course  of  your  career,  what 
do  you  wish  you  hadn't  done?  Not  to 

be  a  Pollyanna,  but  when  I  look  back  at 
my  career,  I  can’t  say  that  I  wish  l  hadn’t 
done  one  thing  or  another.  Sure,  l  have 
run  into  problems  and  have  made  my 
share  of  mistakes,  but  l  don't  wish  they 
hadn’t  happened.  At  the  time,  l  might 
have  felt  differently.  But  in  retrospect, 
all  of  my  experiences,  including  the 
mistakes,  have  added  to  my  current 
capabilities  and  knowledge. 


If  you  have  a  question 
for  one  of  our  Premier 
100  IT  Leaders,  send 
it  to  askaleader@ 
computerworid.com, 
and  watch  for  this 
column  each  month. 


Apps  for  Jobs 

Several  free  applications  make  it  possible  to  search 
various  jobs  databases  while  on  the  go.  We  took  a  look 
at  what  users  had  to  say  about  smartphone  jobs  apps  at 
Appitalism.com  and  other  sites: 


A+  IFindJob 

iPhone 

a  The  IFindJob  app  had  no  reviews  at 
Appitalism  and  only  two  reviews  at  the  Apple 
App  Store,  both  complaining  that  searches 


brought  up  the  message  “No  results  found.” 


OFind  Your  Next  Job 

BlackBerry 

a  At  BlackBerry  App  World,  the  Find  Your 
Next  Job  app  got  11  reviews,  where  users 
either  loved  it  (5  stars,  “Great  for  finding  a 
job”)  or  hated  it  (no  stars,  “Don’t  waste  your  time”).  Some  users 
seemed  to  have  trouble  getting  a  connection  with  the  app. 


Job  Search 

Android,  iPhone.  Palm  WebOS. 

Windows  Mobile 

a  This  lndeed.com  app  got  one  5-star  review 
at  Appitalism  and  a  3.5-star  average  at  the 
App  Store.  Many  App  Store  reviewers  said  they  didn’t  need  the 
app  because  it  was  more  effective  to  use  the  iPhone’s  browser 
to  access  the  lndeed.com  website  directly.  At  the  Android 
Market,  the  overall  rating  was  4.5  stars. 


Mployd  Job  Search 

iPhone 

a  At  the  App  Store,  six  people 
rated  this  app,  giving  it  a 
2-star  average. 


Real-Time  Jobs 

iPhone 

a  With  over  450  ratings  at  the  App  Store,  the 
Real-Time  Jobs  app  averaged  2  stars  and  got 
reviews  that  are  all  over  the  map. 


Search  Jobs  Beyond 

BlackBerry 

a  The  Search  Jobs  Beyond  app  got  18  re¬ 
views  at  BlackBerry  App  World,  with  an  aver¬ 
age  rating  of  2  stars.  As  with  the  other  apps, 
experiences  tended  to  be  either  very  good  or  very  bad  (seven 
reviewers  gave  no  stars,  while  seven  others  awarded  5  stars). 
But  in  this  case,  several  of  those  who  hated  the  app  seemed  to 
live  outside  the  U.S.  coverage  area. 


Y 

L  BEYOND J 
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IT 


careers 


Attention  Law  Firms,  IT  Consultants  &  Staffing  Agencies. 

Are  you  frequently  placing  legal  or  immigration  advertisements? 


Place  your  La 

Let  us  help  you  put  together  a  cost-effective  program 
make  this  time-consuming  task  a  little  easier. 


Contact  Enku  Gubaie  at  800.762.2977 


Looking  for  a  challenging 

IT  Career, 
shouldn’t  be 
such  a  challenge. 


Check  back  with  us  weekly  for  fresh  listings  placed 
by  top  companies  looking  for  skilled 
professionals  like  you! 


careers 


Program  Manager  -  Server  & 
Tools  -  BG  or  Other  needed  by 
MICROSOFT  CORPORATION 
in  Redmond,  WA.  Coordinate 
program  development  of  com¬ 
puter  software  applications,  sys¬ 
tems  or  services,  working  with 
development  &  product  planning 
teams  on  standard  or  complex 
problems.  Write  functional  speci¬ 
fications  &  apply  principles  & 
techniques  of  comp,  sci.,  engi¬ 
neering  and/or  mathematical 
analysis.  Areas  of  responsibility 
span  the  product  life  cycle  & 
include  owning  or  contributing  to 
the  vision  &  strategy  creation  for 
the  product  or  service,  designing 
all  areas  of  the  product  or  serv¬ 
ice,  &  managing  implementation 
to  support  the  product  or  service 
release.  Also  responsible  for 
overall  communication  within  the 
team,  with  other  business 
groups,  &  with  customers  &  part¬ 
ners.  May  be  responsible  for 
managing  software  localization 
projects  or  software  of  business 
processes  or  operations  pro¬ 
jects.  May  be  assigned  to  vari¬ 
ous  projects  that  utilize  the 
required  skills  to  deploy  suc¬ 
cessful  product  or  services 
releases,  from  early  product 
definition  &  scoping  to  detailed 
specification,  implementation  & 
roll-out  phases.  May  work  on 
coordinating  shipping  of  major 
software  releases  utilizing  skills 
in  managing  software  or  busi¬ 
ness  processes  for  operations, 
systems,  projects,  tools  or  poli¬ 
cies,  managing  software  local¬ 
ization  projects,  OI_AP,  SQL 
Server,  reporting,  and  SQL  and / 
or  T-SQL.  8AM  -  5PM,  Mon-Fri; 
$11 8,688/year,  standard  com¬ 
pany  benefits.  Requires 
Bachelor's  or  foreign  equivalent 
degree  in  Comp.  Sci., 
Engineering,  Math.,  Info.  Sys., 
Physics  or  a  related  field  &  1 
year  of  experience  in  software- 
related,  centralized  &  coor¬ 
dinated  program/project  man¬ 
agement  and/or  designing, 
developing  &  releasing  software 
products  or  services.  In  lieu  of  a 
Bachelor's  degree,  employer  will 
accept  2  additional  years  of  soft¬ 
ware  development  experience 
formulating  and  analyzing  soft¬ 
ware  requirements  utilizing  C, 
C++,  C#  or  a  different  high  level 
programming  language.  Edu.  or 
experience  must  include:  man¬ 
aging  software  or  business  proc¬ 
esses  for  operations,  systems, 
projects,  tools  or  policies,  man¬ 
aging  software  localization  pro¬ 
jects,  OLAP,  SQL  Server,  report¬ 
ing,  and  SQL  and/or  T-SQL, 
which  may  be  gained  concur¬ 
rently.  Any  suitable  combination 
of  education,  training  or  expe¬ 
rience  is  acceptable.  To  apply, 
submit  resumes  to:  Recruitment 
&  Employment  Office, 
MICROSOFT  CORPORATION, 
Attn:  Job  Ref  #:  MIC42057,  P.O. 
Box  56625,  Atlanta,  GA  30303. 


Quantros,  Inc.  has  openings 
for  Directors,  Engineering 
Development  (Direct  software 
engineering  function  in  devel¬ 
oping,  releasing,  and  main¬ 
taining  software  applications/ 
operating  systems  according 
to  business  needs)  Req.  MS/ 
foreign  equiv  in  CS,  Eng 
(any),  CIS  or  rel.  field,  Travel 
req.  Reply  w/resume  to  HR, 
690  N.  McCarthy  Blvd.  Ste 
200,  Milpitas,  CA  95035 
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Aha! 


In  the  data  center  where  he  works,  this  pilot  fish  discovers  that  one  server’s  RAID 
array  is  showing  a  failed  drive.  Fish  pulls  the  drive,  replaces  it  with  a  fresh  one 
and  waits  for  the  array  to  start  rebuilding  the  contents  of  the  drive.  But  that 
drive  shows  as  failed,  too.  Huh?  Fish  tries  yet  another  drive.  That  one  produces 
the  same  result.  “I  finally  looked  in  the  drive  slot,”  fish  says.  “A  Post-it  note  was 
jammed  against  the  connector  at  the  back  of  the  slot.  I  was  able  to  remove  it  with¬ 


out  powering  down  the  server  and  re¬ 
placed  the  drive,  and  the  array  rebuilt 
itself,  all  without  any  downtime." 

Details,  Details 

This  executive  has  never  set  the 
forwarding  on  his  email.  “He  usually 
makes  his  office  manager  do  it  for 
him,"  says  the  pilot  fish  responsible 
for  giving  him  IT  support.  “But  he 


landed  at  corporate  headquarters 
for  a  couple  of  days,  and  informed 
me  that  he  broke  his  personal  Black- 
Berry  and  got  a  new  one.  He  said  he 
wasn't  receiving  any  emails  on  the 
new  BlackBerry  and  people  send¬ 
ing  emails  got  rejection  emails  in 
return.  I  explained  that  all  he  needed 
to  do  was  set  his  email  to  forward 
messages  to  his  new  BlackBerry.  We 


went  through  what  options  should 
be  checked  off  and  why.  Finally,  we 
got  to  the  place  where  he  had  to 
put  in  the  address  that  email  would 
be  forwarded  to.  ‘What  do  I  put  in 
there?’  he  asked.  I  told  him,  ‘Put  in 
the  new  BlackBerry  email  address.’ 
He  looked  up.  'Well,  what  is  my 
new  email  address?’  ’Did  you  not 
get  told  what  your  email  ad¬ 
dress  is?’  I  asked.  He  replied, 
‘Why  would  l  want  to  know 
that?’” 

Time  Is  Money, 
Right? 

Pilot  fish  is  working  late  to  get 
ready  to  leave  on  vacation,  but 
the  database  is  responding  slow¬ 
ly.  “I  pull  up  the  top-sessions 
list  and  there’s  a  session  hitting 
the  database  from  a  workstation 
halfway  around  the  world,”  he  says. 
“I’ve  never  seen  this  one  before,  so  l 
send  out  a  note  to  the  development 
group:  Does  anyone  know  what  this 
thing  is?  It's  I/O  intensive  and  has 
been  running  for  the  last  15  hours. 
Then  I  finish  up  my  work  and  go  on 
vacation.  When  l  get  back,  I  see  a 
number  of  responses  to  my  query: 
Not  mine.  Not  mine.  It  might  have 
something  to  do  with  such-and-such 
a  process.  Nothing  definitive.  The 
next  day  l  get  a  note  from  a  tech 
somewhere  in  Europe.  ‘This  is  vital. 
It’s  checking  for  new  orders.’  So  l 
monitor  the  process  for  a  while  and 
do  some  timing  calculations.  Then 
I  send  the  tech  in  Europe  this  ques¬ 
tion:  ‘Do  you  think  we  could  check 
for  new  orders  a  little  less  frequently 
than  once  every  three  seconds?” 

»  Feed  the  Shark!  Send  me 
your  true  tale  of  IT  life  at  sharky® 
computerworld.com.  You’ll  snag  a 
snazzy  Shark  shirt  if  l  use  it. 


O  CHECK  OUT  Sharky’s  blog,  browse  the  Sharkives  and  sign  up  for  home  delivery  at  computerworld.com/sharky. 
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Life  on  Jobs-less  Earth 


Our  first  stop 
on  Jobs-less 
Earth  is  Apple. 

Oh,  wait, 
what  Apple? 


Steven  J.  Vaughan- 
Nichols  has  been 
writing  about 
technology  and  the 
business  of  technology 
since  CP/M-80  was 
cutting-edge  and 
300bps  was  a  fast 
Internet  connection  - 
and  we  liked  it! 
He  can  be  reached  at 
sjvn@vnal.com. 


S  SOON  AS  STEVE  JOBS  ANNOUNCED  that  he  was  stepping  down 
as  Apple’s  CEO,  a  swarm  of  stories  appeared  singing  his  praises.  Fair 
enough.  Other  stories  pointed  out  that  Jobs  made  mistakes.  OK,  I 
can  see  that,  too.  What  I  don’t  get  is  all  the  people  who  are  saying 


that  Jobs  wasn’t  that  important.  That  is  wrong.  If 
we  could  step  into  a  parallel  world  without  Jobs,  I 
doubt  you’d  recognize  it. 

It’s  true  that  Jobs  was  never  a  great  developer  or 
engineer.  He  hired  great  developers  and  engi¬ 
neers.  He  also  wasn’t  that  original.  But  Jobs’  gifts 
were  fourfold:  He  could  recognize  great  technolo¬ 
gy  when  he  saw  it;  he  had  a  great  design  aesthetic; 
once  he  had  a  vision,  he  stuck  with  it  and  made  it 
work;  and  he  could  persuade  others  to  back  it. 

Doesn’t  sound  like  much?  It  was  everything. 
Let’s  visit  Jobs-less  Earth,  shall  we? 

First,  we’ll  look  in  on  Apple.  Oh  wait,  what 
Apple?  In  this  world,  only  tech  geeks  of  a  certain 
age  (like  me)  even  remember  Apple  and  those 
other  1980s  computer  companies,  such  as  Coleco, 
Sinclair  and  Kaypro.  Some  tech  nostalgists  recall 
the  Apple  He  with  the  same  kind  of  fondness  that, 
in  our  world,  is  felt  for  the  Commodore  64. 

The  Mac?  Without  Jobs  to  push  it,  there  is  no 
Mac.  And  no  Lisa,  the  first  business  computer 
with  a  GUI  and  mouse.  Well,  you  say,  even  Jobs- 
less  Earth  still  has  Xerox  PARC,  and  therefore  the 
GUI  and  mouse.  Yes,  but  without  Jobs,  years  go  by 
before  they  go  mainstream. 

Which  means  that  over  at  Microsoft,  DOS  and 
the  command-line  interface  survive  many  years 
longer.  In  our  world.  Bill  Gates  and  friends  got  to 
know  the  WIMP  (windows,  icon,  mouse,  pointer) 
interface  because  of  the  work  they  did  in  the  early 
’80s  for  Mac  applications.  Without  Jobs,  I  estimate 
we’re  at  least  a  decade  behind  in  desktop  design. 

As  a  result,  PCs  are  business  tools.  Consumers 
interested  in  computing  tend  to  buy  hobbyist  kits. 
There  is  no  mass  market  for  PCs.  For  most  people, 
they  just  aren’t  that  useful.  Lately,  some  people 


who  have  grown  accustomed  to  using  PCs  at  work 
have  coughed  up  a  couple  of  thousand  dollars  so 
they  can  have  one  in  their  home  offices.  But  no¬ 
body’s  grandmother  uses  them  to  post  pictures  of 
her  grandchildren,  and  no  teenagers  spend  hours 
on  Facebook.  Oh,  yeah,  there  is  no  Facebook. 

In  other  words,  computing  technology  has  not 
yet  gone  popular.  But  let’s  assume  that  somewhere 
down  the  road  we  do  get  widespread  GUIs  and 
PCs  in  nearly  every  home.  That  opens  the  door 
to  things  like  MP3  players.  But  they  are  the  sort 
that  we  had  around  the  turn  of  the  century.  Junk. 
Without  Jobs,  there  is  no  iPod,  and  the  entire 
digital  music  revolution  is  delayed  for  years. 

On  Jobs-less  Earth,  you  probably  do  have  a 
smartphone.  But  it’s  unlikely  to  be  exactly  the 
smartphone  you  have  here,  where  touch  technol¬ 
ogy  has  permeated  our  world  to  a  remarkable 
degree.  On  Jobs-less  Earth,  with  no  iPod,  there’s 
no  iPod  Touch  and  therefore  no  iPhone.  Without 
Jobs,  is  there  anyone  else  capable  of  the  vision  that 
became  the  iPhone  —  someone  who’s  also  capable 
of  executing  that  vision?  I  don’t  think  so. 

In  this  alternative  world,  once  home  computing 
becomes  popular,  someone  will  develop  the  tablet. 
But  hardly  anyone  will  buy  one.  Without  the  iPad, 
there’s  no  such  thing  as  a  popular  tablet. 

The  picture  I’m  painting  of  Jobs-less  Earth  is 
extreme,  of  course.  Others  might  have  filled  in 
for  our  Jobs  in  some  areas.  My  point  is  that  Jobs 
did  indeed  have  a  tremendous  impact,  far  beyond 
the  world  of  Apple  fanboys.  I,  for  one,  would  be 
less  happy  in  a  Jobs-less  world,  with  its  Windows 
98-style  desktops,  “luggable”  mobile  devices  and 
IT-centered  computing  world.  And  I’m  already 
missing  Steve  Jobs  in  our  technology  world.  ♦ 
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Delivering  a  si  'onger  network 
And  more  pers  n  I  service. 

Our  network  has  expanded,  and  so  has  our  ability  to  serve 
you.  When  you  combine  our  personal,  consultative  approach 
with  our  premiere  technology  platform  -  including  colocation, 
man  jed  hosting  and  nationwide  fiber-optic  network  with 
lobal  reach  -  you  will  find  you  are  free  to  drive  productivity 
an  be  om-line  g  owth.  Your  link  to  what's  text. 
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See  the  benefits  of  partnering 
with  us  at  centuryiink-business.com 


Qwest  is  now  CenturyLink. 


Since  the  start  of  2010,  more  than  250  companies  around  the  world  have 
migrated  workloads  (including  Oracle  workloads)  to  System  z .  Why?  Maybe 
it's  the  savings  (up  to  50%  on  applicable  IT  costs).  Or  the  top-rated  EAL5 
security  classification.  Or  because  it  delivers  up  to  99.999%  availability  and 
uptime.  Or  maybe  it’s  an  even  better  reason:  all  of  the  above. 
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